{"schema_version":"1","data":[{"id":24336,"advisory_id":"9622faf1-e2d9-4d5b-851a-e8abc2e7ea25","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-103868","source_published_at":"2026-10-07T05:46:12.936+00:00","published_at":"2026-10-25T06:34:20.878799+00:00","extraction_method":"structured","technologies":["core-cve","red-hat-ansible-automation-platform-2","red-hat-satellite-6","red-hat-update-infrastructure-4-for-cloud-providers","red-hat-update-infrastructure-5"],"cve_ids":["CVE-2026-103868"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Pulp-container: registry credentials are reused across remotes in a worker","summary":"A flaw was found in pulp-container when it authenticates to an upstream registry. Basic and bearer credentials from one remote are reused for later downloads in the same worker. A user who can sync a container remote, and can point that remote at a server they control, receives the username, password, or bearer token stored for a different remote, and can reuse that credential at the upstream registry. Content stored in Pulp is not changed, and the service is not stopped.","evidence":"cve:CVE-2026-103868","products":[{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Satellite 6","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Satellite 6","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 4 for Cloud Providers","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 4 for Cloud Providers","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-103868","aliases":["CVE-2026-103868"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-24/hub-rhel8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-25/hub-rhel8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-26/hub-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-27/hub-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"python3.11-pulp-container","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"python3.12-pulp-container","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"python3x-pulp-container","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"python-pulp-container","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:satellite:6"],"vendor":"Red Hat","product":"Red Hat Satellite 6","packageName":"python3.12-pulp-container","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:satellite:6"],"vendor":"Red Hat","product":"Red Hat Satellite 6","packageName":"python-pulp-container","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:4::el8"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 4 for Cloud Providers","packageName":"python-pulp-container","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:rhui:4::el8"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 4 for Cloud Providers","packageName":"python-pulp-container-client","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","packageName":"python-pulp-container-client","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","packageName":"rhui5/rhua-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","packageName":"rhui5/rhua-tp-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"}],"modified":"2026-10-14T22:56:52.773Z","provider":"cve","references":["https://access.redhat.com/security/cve/CVE-2026-103868","https://bugzilla.redhat.com/show_bug.cgi?id=2544601"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-103868","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-07T14:55:42.325137Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-07T14:55:52.612Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T22:56:52.773Z"}}},"related_cves":[{"value":"CVE-2026-103868","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23112,"advisory_id":"228be0ee-c1f8-4bd6-9d9a-d3216f115a35","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-5419","source_published_at":"2026-06-01T19:26:56.524+00:00","published_at":"2026-10-25T06:13:09.749921+00:00","extraction_method":"structured","technologies":["cert-manager-support-for-red-hat-openshift-release-1-17","cert-manager-support-for-red-hat-openshift-release-1-18","cert-manager-support-for-red-hat-openshift-release-1-20","core-cve","red-hat-discovery-2","red-hat-enterprise-linux-10","red-hat-enterprise-linux-10-0-extended-update-support","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9","red-hat-enterprise-linux-9-4-update-services-for-sap-solutions","red-hat-enterprise-linux-9-6-extended-update-support","red-hat-hardened-images","red-hat-openshift-ai-3-4","red-hat-openshift-container-platform-4","red-hat-update-infrastructure-5"],"cve_ids":["CVE-2026-5419"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal","summary":"A flaw was found in gnutls. The PKCS#7 padding check, performed during decryption, was not constant-time. This timing side-channel could allow a remote attacker to potentially leak sensitive information about the padding bytes through observable timing differences. This vulnerability is a form of information disclosure.","evidence":"cve:CVE-2026-5419","products":[{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10.0 Extended Update Support","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.6 Extended Update Support","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/31/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/32/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/33/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"low","structured":{"id":"CVE-2026-5419","aliases":["CVE-2026-5419"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Low","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.7,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}}],"affected":[{"versions":[{"status":"affected","version":"0"}],"packageName":"gnutls","collectionURL":"https://gitlab.com/gnutls/gnutls"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:3.8.10-4.el10_2","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.8.9-9.el10_0.19","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.8.10-4.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.8.10-4.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.4::appstream","cpe:/o:redhat:rhel_e4s:9.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.8.3-4.el9_4.6","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6::appstream","cpe:/o:redhat:rhel_eus:9.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.8.3-6.el9_6.4","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371080","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371069","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791788287","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791970484","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459707","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459711","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459759","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1789029076","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791966259","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790598593","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-trust-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1782159791","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-server-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1782166952","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-ui-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"3.8.13-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1790703542","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-neuron-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525684","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525671","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/haproxy-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525693","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525739","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241211","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-kubernetes-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787135742","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241260","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/ose-hypershift-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-14T19:45:47.744Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:13274","https://access.redhat.com/errata/RHSA-2026:20612","https://access.redhat.com/errata/RHSA-2026:20613","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:26409","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:30004","https://access.redhat.com/errata/RHSA-2026:32962","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/errata/RHSA-2026:82304","https://access.redhat.com/errata/RHSA-2026:82322","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:82888","https://access.redhat.com/security/cve/CVE-2026-5419","https://bugzilla.redhat.com/show_bug.cgi?id=2467686","https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-13"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-5419","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-06-02T12:35:30.709028Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-06-02T12:35:40.969Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T19:45:47.744Z"}}},"related_cves":[{"value":"CVE-2026-5419","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23110,"advisory_id":"556feb42-5536-476d-ba06-060847818968","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-3832","source_published_at":"2026-04-30T17:41:28.896+00:00","published_at":"2026-10-25T06:13:08.561542+00:00","extraction_method":"structured","technologies":["cert-manager-support-for-red-hat-openshift-release-1-17","cert-manager-support-for-red-hat-openshift-release-1-18","cert-manager-support-for-red-hat-openshift-release-1-20","core-cve","red-hat-discovery-2","red-hat-enterprise-linux-10","red-hat-enterprise-linux-10-0-extended-update-support","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9","red-hat-hardened-images","red-hat-openshift-container-platform-4","red-hat-update-infrastructure-5"],"cve_ids":["CVE-2026-3832"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response","summary":"A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabled may incorrectly accept a revoked server certificate, potentially leading to a compromise of trust.","evidence":"cve:CVE-2026-3832","products":[{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10.0 Extended Update Support","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"low","structured":{"id":"CVE-2026-3832","aliases":["CVE-2026-3832"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Low","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.7,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}}],"affected":[{"versions":[{"status":"affected","version":"0","lessThan":"3.8.13","versionType":"semver"}],"packageName":"gnutls","collectionURL":"https://gitlab.com/gnutls/gnutls","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:3.8.10-4.el10_2","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.8.9-9.el10_0.19","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.8.10-4.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.8.10-4.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371080","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371069","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791788287","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791970484","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459707","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459711","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459759","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1789029076","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791966259","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790598593","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-trust-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1782159791","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-server-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1782166952","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-ui-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"3.8.13-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525684","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525671","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/haproxy-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525693","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525739","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241211","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-kubernetes-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787135742","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241260","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/ose-hypershift-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-14T19:45:46.353Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:13274","https://access.redhat.com/errata/RHSA-2026:20612","https://access.redhat.com/errata/RHSA-2026:20613","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:26409","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:82304","https://access.redhat.com/errata/RHSA-2026:82322","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:82888","https://access.redhat.com/security/cve/CVE-2026-3832","https://bugzilla.redhat.com/show_bug.cgi?id=2445762","https://gitlab.com/gnutls/gnutls/-/issues/1801"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-3832","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-04-30T18:22:07.438915Z"}}}],"references":[{"url":"https://gitlab.com/gnutls/gnutls/-/issues/1801","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-05-18T20:22:06.192Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T19:45:46.353Z"}}},"related_cves":[{"value":"CVE-2026-3832","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23105,"advisory_id":"9631ec9d-df87-4dd7-a40d-f9724edd14ca","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-9820","source_published_at":"2026-01-26T19:58:32.886+00:00","published_at":"2026-10-25T06:13:05.627095+00:00","extraction_method":"structured","technologies":["cert-manager-support-for-red-hat-openshift-release-1-18","core-cve","red-hat-ceph-storage-8","red-hat-discovery-2","red-hat-enterprise-linux-10","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9","red-hat-hardened-images","red-hat-insights-proxy-1-5","red-hat-openshift-container-platform-4","red-hat-update-infrastructure-5","rhel-8-based-middleware-containers"],"cve_ids":["CVE-2025-9820"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function","summary":"A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the application using GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation attacks.","evidence":"cve:CVE-2025-9820","products":[{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ceph Storage 8","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Insights proxy 1.5","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2025-9820","aliases":["CVE-2025-9820"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Low","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"versions":[{"status":"affected","version":"3.8.1"},{"status":"affected","version":"3.8.2"},{"status":"affected","version":"3.8.3"},{"status":"affected","version":"3.8.4"},{"status":"affected","version":"3.8.5"},{"status":"affected","version":"3.8.6"},{"status":"affected","version":"3.8.7"},{"status":"affected","version":"3.8.8"},{"status":"affected","version":"3.8.9"},{"status":"affected","version":"3.8.10"}],"packageName":"gnutls","collectionURL":"https://gitlab.com/gnutls/gnutls"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:3.8.10-3.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:3.6.16-8.el8_10.5","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:3.6.16-8.el8_10.5","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.8.3-10.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.8.3-10.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-4.1777325677","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-businesscentral-monitoring-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-4.1777325711","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-businesscentral-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-4.1777325710","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-controller-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-3.1777325680","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-dashbuilder-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-4.1777325709","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-kieserver-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-4.1777325680","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-process-migration-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-4.1777325708","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-smartrouter-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459707","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459711","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459759","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1789029076","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791966259","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ceph_storage:8::el9"],"vendor":"Red Hat","product":"Red Hat Ceph Storage 8","versions":[{"status":"unaffected","version":"1774002867","lessThan":"*","versionType":"rpm"}],"packageName":"rhceph/rhceph-8-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1775668717","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-server-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1775675922","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-ui-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"3.8.12-1.1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:insights_proxy:1.5::el9"],"vendor":"Red Hat","product":"Red Hat Insights proxy 1.5","versions":[{"status":"unaffected","version":"1773685509","lessThan":"*","versionType":"rpm"}],"packageName":"insights-proxy/insights-proxy-container-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1773670073","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1773672059","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/haproxy-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1773668803","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1773670137","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-14T19:46:28.307Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:13812","https://access.redhat.com/errata/RHSA-2026:3477","https://access.redhat.com/errata/RHSA-2026:4188","https://access.redhat.com/errata/RHSA-2026:4655","https://access.redhat.com/errata/RHSA-2026:4943","https://access.redhat.com/errata/RHSA-2026:5585","https://access.redhat.com/errata/RHSA-2026:5606","https://access.redhat.com/errata/RHSA-2026:7329","https://access.redhat.com/errata/RHSA-2026:7477","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/security/cve/CVE-2025-9820","https://bugzilla.redhat.com/show_bug.cgi?id=2392528","https://gitlab.com/gnutls/gnutls/-/commit/1d56f96f6ab5034d677136b9d50b5a75dff0faf5","https://gitlab.com/gnutls/gnutls/-/issues/1732","https://www.gnutls.org/security-new.html#GNUTLS-SA-2025-11-18"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.openwall.com/lists/oss-security/2025/11/20/2"}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2026-01-26T20:08:12.926Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2025-9820","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-01-26T20:10:45.615719Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-01-26T20:12:19.249Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC CN 4100","versions":[{"status":"affected","version":"0","lessThan":"V5.0","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-032379.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-05-12T12:02:44.799Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T19:46:28.307Z"}}},"related_cves":[{"value":"CVE-2025-9820","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23078,"advisory_id":"bd2c58fd-6843-469b-b153-b5fcc32e16a7","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-5121","source_published_at":"2026-03-30T07:47:28.562+00:00","published_at":"2026-10-25T06:12:49.502614+00:00","extraction_method":"structured","technologies":["cert-manager-support-for-red-hat-openshift-release-1-17","cert-manager-support-for-red-hat-openshift-release-1-18","cert-manager-support-for-red-hat-openshift-release-1-20","core-cve","red-hat-ai-inference-server-3-2","red-hat-ai-inference-server-3-3","red-hat-discovery-2","red-hat-enterprise-linux-10","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7-extended-lifecycle-support","red-hat-enterprise-linux-8","red-hat-enterprise-linux-8-2-advanced-update-support","red-hat-enterprise-linux-8-4-advanced-mission-critical-update-support","red-hat-enterprise-linux-8-4-extended-update-support-long-life-add-on","red-hat-enterprise-linux-8-6-advanced-mission-critical-update-support","red-hat-enterprise-linux-8-6-telecommunications-update-service","red-hat-enterprise-linux-8-6-update-services-for-sap-solutions","red-hat-enterprise-linux-8-8-telecommunications-update-service","red-hat-enterprise-linux-8-8-update-services-for-sap-solutions","red-hat-enterprise-linux-9","red-hat-enterprise-linux-9-0-update-services-for-sap-solutions","red-hat-enterprise-linux-9-2-update-services-for-sap-solutions","red-hat-enterprise-linux-9-4-extended-update-support","red-hat-enterprise-linux-9-6-extended-update-support","red-hat-hardened-images","red-hat-insights-proxy-1-5","red-hat-openshift-container-platform-4-12","red-hat-openshift-container-platform-4-13","red-hat-openshift-container-platform-4-14","red-hat-openshift-container-platform-4-15","red-hat-openshift-container-platform-4-16","red-hat-openshift-container-platform-4-17","red-hat-openshift-container-platform-4-18","red-hat-openshift-container-platform-4-19","red-hat-update-infrastructure-5","rhel-8-based-middleware-containers"],"cve_ids":["CVE-2026-5121"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing","summary":"A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.","evidence":"cve:CVE-2026-5121","products":[{"name":{"value":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.2 Advanced Update Support","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Telecommunications Update Service","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.4 Extended Update Support","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.6 Extended Update Support","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.12","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.13","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.14","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.15","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.16","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.17","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.18","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.19","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/31/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/32/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/33/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/34/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/35/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/36/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/37/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/38/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/39/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/40/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AI Inference Server 3.2","evidence":"/containers/cna/affected/41/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AI Inference Server 3.2","evidence":"/containers/cna/affected/42/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AI Inference Server 3.2","evidence":"/containers/cna/affected/43/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AI Inference Server 3.3","evidence":"/containers/cna/affected/44/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AI Inference Server 3.3","evidence":"/containers/cna/affected/45/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AI Inference Server 3.3","evidence":"/containers/cna/affected/46/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AI Inference Server 3.3","evidence":"/containers/cna/affected/47/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/48/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/49/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Insights proxy 1.5","evidence":"/containers/cna/affected/50/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/51/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/52/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/53/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/54/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/55/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/56/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/57/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/58/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/59/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-5121","aliases":["CVE-2026-5121"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"cpes":["cpe:/o:redhat:rhel_els:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","versions":[{"status":"unaffected","version":"0:3.1.2-14.el7_9.2","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::crb","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:3.3.3-7.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.2::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.2 Advanced Update Support","versions":[{"status":"unaffected","version":"0:3.3.2-8.el8_2.2","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:3.3.3-1.el8_4.2","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:3.3.3-1.el8_4.2","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_e4s:8.6::baseos","cpe:/o:redhat:rhel_tus:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:3.3.3-6.el8_6.1","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_e4s:8.6::baseos","cpe:/o:redhat:rhel_tus:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:3.3.3-6.el8_6.1","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_e4s:8.6::baseos","cpe:/o:redhat:rhel_tus:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.3.3-6.el8_6.1","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:3.3.3-5.el8_8.2","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.3.3-5.el8_8.2","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.5.3-9.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.5.3-9.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.0::appstream","cpe:/o:redhat:rhel_e4s:9.0::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.5.3-2.el9_0.4","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.2::appstream","cpe:/o:redhat:rhel_e4s:9.2::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.5.3-5.el9_2.2","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.4::appstream","cpe:/a:redhat:rhel_eus:9.4::crb","cpe:/o:redhat:rhel_eus:9.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.5.3-5.el9_4","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6::appstream","cpe:/o:redhat:rhel_eus:9.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.5.3-7.el9_6.1","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.12::el8"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.12","versions":[{"status":"unaffected","version":"412.86.202604281506-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.13::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.13","versions":[{"status":"unaffected","version":"413.92.202605271328-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.14::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.14","versions":[{"status":"unaffected","version":"414.92.202605060243-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.15::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.15","versions":[{"status":"unaffected","version":"415.92.202605060220-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.16::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.16","versions":[{"status":"unaffected","version":"416.94.202604211449-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.17::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.17","versions":[{"status":"unaffected","version":"417.94.202605112123-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.18::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.18","versions":[{"status":"unaffected","version":"418.94.202604240015-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.19::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.19","versions":[{"status":"unaffected","version":"4.19.9.6.202605201155-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-4.1777325677","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-businesscentral-monitoring-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-4.1777325711","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-businesscentral-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-4.1777325710","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-controller-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-3.1777325680","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-dashbuilder-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-4.1777325709","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-kieserver-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-4.1777325680","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-process-migration-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-4.1777325708","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-smartrouter-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371080","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371069","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791788287","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791970484","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459707","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459711","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459759","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1789029076","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791966259","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790598593","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-trust-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.2::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.2","versions":[{"status":"unaffected","version":"1779223654","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/vllm-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.2::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.2","versions":[{"status":"unaffected","version":"1779223651","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/vllm-rocm-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.2::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.2","versions":[{"status":"unaffected","version":"1780681984","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/model-opt-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.3::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.3","versions":[{"status":"unaffected","version":"1778244559","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/model-opt-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.3::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.3","versions":[{"status":"unaffected","version":"1778244531","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/vllm-rocm-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.3::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.3","versions":[{"status":"unaffected","version":"1778274666","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/vllm-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.3::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.3","versions":[{"status":"unaffected","version":"1778244546","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/vllm-spyre-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1778156756","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-ui-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"3.8.7-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:insights_proxy:1.5::el9"],"vendor":"Red Hat","product":"Red Hat Insights proxy 1.5","versions":[{"status":"unaffected","version":"1776868961","lessThan":"*","versionType":"rpm"}],"packageName":"insights-proxy/insights-proxy-container-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1776868774","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1776868744","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/haproxy-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1776868772","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1776868842","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1777459441","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-kubernetes-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1777454300","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1777459504","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"}],"modified":"2026-10-14T19:24:20.226Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:10065","https://access.redhat.com/errata/RHSA-2026:10097","https://access.redhat.com/errata/RHSA-2026:11768","https://access.redhat.com/errata/RHSA-2026:12071","https://access.redhat.com/errata/RHSA-2026:12274","https://access.redhat.com/errata/RHSA-2026:13812","https://access.redhat.com/errata/RHSA-2026:14773","https://access.redhat.com/errata/RHSA-2026:14937","https://access.redhat.com/errata/RHSA-2026:15087","https://access.redhat.com/errata/RHSA-2026:16008","https://access.redhat.com/errata/RHSA-2026:16009","https://access.redhat.com/errata/RHSA-2026:16030","https://access.redhat.com/errata/RHSA-2026:16174","https://access.redhat.com/errata/RHSA-2026:17596","https://access.redhat.com/errata/RHSA-2026:19724","https://access.redhat.com/errata/RHSA-2026:19725","https://access.redhat.com/errata/RHSA-2026:20040","https://access.redhat.com/errata/RHSA-2026:21690","https://access.redhat.com/errata/RHSA-2026:25096","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:82304","https://access.redhat.com/errata/RHSA-2026:82322","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:82888","https://access.redhat.com/errata/RHSA-2026:8510","https://access.redhat.com/errata/RHSA-2026:8517","https://access.redhat.com/errata/RHSA-2026:8521","https://access.redhat.com/errata/RHSA-2026:8534","https://access.redhat.com/errata/RHSA-2026:8864","https://access.redhat.com/errata/RHSA-2026:8866","https://access.redhat.com/errata/RHSA-2026:8867","https://access.redhat.com/errata/RHSA-2026:8873","https://access.redhat.com/errata/RHSA-2026:8908","https://access.redhat.com/errata/RHSA-2026:8944","https://access.redhat.com/errata/RHSA-2026:9026","https://access.redhat.com/errata/RHSA-2026:9592","https://access.redhat.com/errata/RHSA-2026:9832","https://access.redhat.com/security/cve/CVE-2026-5121","https://bugzilla.redhat.com/show_bug.cgi?id=2452945","https://github.com/advisories/GHSA-2vwv-vqpv-v8vc","https://github.com/libarchive/libarchive/pull/2934"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":9.8,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-5121","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-03-31T03:55:34.402717Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-190","description":"CWE-190 Integer Overflow or Wraparound"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-03-31T13:52:02.886Z"}},{"affected":[{"vendor":"Siemens","product":"SIDIS Secured SmartPlug","versions":[{"status":"affected","version":"0","lessThan":"V7.26.0310","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-585531.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-07-14T12:45:28.047Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T19:24:20.226Z"}}},"related_cves":[{"value":"CVE-2026-5121","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23077,"advisory_id":"87ce4f82-9ee2-4c08-81c3-95ae1f78d393","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-48864","source_published_at":"2026-05-26T16:16:07.581+00:00","published_at":"2026-10-25T06:12:48.904536+00:00","extraction_method":"structured","technologies":["cert-manager-support-for-red-hat-openshift-release-1-17","cert-manager-support-for-red-hat-openshift-release-1-18","cert-manager-support-for-red-hat-openshift-release-1-20","core-cve","red-hat-discovery-2","red-hat-enterprise-linux-10","red-hat-enterprise-linux-10-0-extended-update-support","red-hat-enterprise-linux-7-extended-lifecycle-support","red-hat-enterprise-linux-8","red-hat-enterprise-linux-8-4-advanced-mission-critical-update-support","red-hat-enterprise-linux-8-4-extended-update-support-long-life-add-on","red-hat-enterprise-linux-8-6-advanced-mission-critical-update-support","red-hat-enterprise-linux-8-6-extended-update-support-long-life-add-on","red-hat-enterprise-linux-8-8-telecommunications-update-service","red-hat-enterprise-linux-8-8-update-services-for-sap-solutions","red-hat-enterprise-linux-9","red-hat-enterprise-linux-9-2-update-services-for-sap-solutions","red-hat-enterprise-linux-9-4-update-services-for-sap-solutions","red-hat-enterprise-linux-9-6-extended-update-support","red-hat-hardened-images","red-hat-insights-proxy-1-5","red-hat-openshift-ai-3-0","red-hat-openshift-ai-3-2","red-hat-openshift-ai-3-4","red-hat-openshift-container-platform-4-12","red-hat-openshift-container-platform-4-13","red-hat-openshift-container-platform-4-14","red-hat-openshift-container-platform-4-15","red-hat-openshift-container-platform-4-16","red-hat-openshift-container-platform-4-17","red-hat-openshift-container-platform-4-18","red-hat-openshift-container-platform-4-19","red-hat-satellite-6-16-for-rhel-8","red-hat-update-infrastructure-4-for-cloud-providers","red-hat-update-infrastructure-5"],"cve_ids":["CVE-2026-48864"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data","summary":"A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to insufficient input validation. An attacker can provide a specially crafted `.solv` file, which, when processed by a vulnerable application, can lead to out-of-bounds memory access. This could result in information disclosure, alteration of program execution, or a denial of service.","evidence":"cve:CVE-2026-48864","products":[{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10.0 Extended Update Support","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.6 Extended Update Support","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.12","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.13","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.14","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.15","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.16","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.17","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.18","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.19","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Satellite 6.16 for RHEL 8","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Satellite 6.16 for RHEL 8","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/31/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/32/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/33/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/34/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/35/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/36/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/37/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/38/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/39/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/40/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/41/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/42/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/43/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/44/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/45/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Insights proxy 1.5","evidence":"/containers/cna/affected/46/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/47/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/48/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/49/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/50/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/51/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/52/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/53/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/54/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/55/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/56/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/57/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/58/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/59/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/60/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/61/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/62/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/63/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/64/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/65/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/66/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 4 for Cloud Providers","evidence":"/containers/cna/affected/67/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-48864","aliases":["CVE-2026-48864"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:0.7.33-5.el10_2","lessThan":"*","versionType":"rpm"}],"packageName":"libsolv","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:0.7.29-8.el10_0.1","lessThan":"*","versionType":"rpm"}],"packageName":"libsolv","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_els:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","versions":[{"status":"unaffected","version":"0:0.6.34-4.el7_9.1","lessThan":"*","versionType":"rpm"}],"packageName":"libsolv","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::crb","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:0.7.20-7.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"libsolv","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:0.7.16-3.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"libsolv","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:0.7.16-3.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"libsolv","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:0.7.20-1.el8_6.1","lessThan":"*","versionType":"rpm"}],"packageName":"libsolv","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:0.7.20-1.el8_6.1","lessThan":"*","versionType":"rpm"}],"packageName":"libsolv","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:0.7.20-4.el8_8.1","lessThan":"*","versionType":"rpm"}],"packageName":"libsolv","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:0.7.20-4.el8_8.1","lessThan":"*","versionType":"rpm"}],"packageName":"libsolv","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:0.7.24-6.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"libsolv","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:0.7.24-6.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"libsolv","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.2::appstream","cpe:/o:redhat:rhel_e4s:9.2::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:0.7.22-4.el9_2.1","lessThan":"*","versionType":"rpm"}],"packageName":"libsolv","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.4::appstream","cpe:/o:redhat:rhel_e4s:9.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:0.7.24-2.el9_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"libsolv","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6::appstream","cpe:/a:redhat:rhel_eus:9.6::crb","cpe:/o:redhat:rhel_eus:9.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:0.7.24-3.el9_6.1","lessThan":"*","versionType":"rpm"}],"packageName":"libsolv","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.12::el8"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.12","versions":[{"status":"unaffected","version":"412.86.202608241157-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.13::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.13","versions":[{"status":"unaffected","version":"413.92.202609080414-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.14::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.14","versions":[{"status":"unaffected","version":"414.92.202608172040-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.15::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.15","versions":[{"status":"unaffected","version":"415.92.202608180329-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.16::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.16","versions":[{"status":"unaffected","version":"416.94.202608150307-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.17::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.17","versions":[{"status":"unaffected","version":"417.94.202608250221-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.18::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.18","versions":[{"status":"unaffected","version":"418.94.202608142238-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.19::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.19","versions":[{"status":"unaffected","version":"4.19.9.6.202608182320-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:satellite:6.16::el8","cpe:/a:redhat:satellite:6.16::el9","cpe:/a:redhat:satellite_capsule:6.16::el8","cpe:/a:redhat:satellite_capsule:6.16::el9","cpe:/a:redhat:satellite_maintenance:6.16::el8","cpe:/a:redhat:satellite_maintenance:6.16::el9","cpe:/a:redhat:satellite_utils:6.16::el8","cpe:/a:redhat:satellite_utils:6.16::el9"],"vendor":"Red Hat","product":"Red Hat Satellite 6.16 for RHEL 8","versions":[{"status":"unaffected","version":"1:0.7.20-7.el8sat","lessThan":"*","versionType":"rpm"}],"packageName":"satellite-capsule:el8/libsolv","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:satellite:6.16::el8","cpe:/a:redhat:satellite:6.16::el9","cpe:/a:redhat:satellite_capsule:6.16::el8","cpe:/a:redhat:satellite_capsule:6.16::el9","cpe:/a:redhat:satellite_maintenance:6.16::el8","cpe:/a:redhat:satellite_maintenance:6.16::el9","cpe:/a:redhat:satellite_utils:6.16::el8","cpe:/a:redhat:satellite_utils:6.16::el9"],"vendor":"Red Hat","product":"Red Hat Satellite 6.16 for RHEL 8","versions":[{"status":"unaffected","version":"1:0.7.20-7.el8sat","lessThan":"*","versionType":"rpm"}],"packageName":"satellite-capsule:el8/libsolv","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371080","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371069","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791788287","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791378395","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791970484","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459707","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459711","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459759","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1789029076","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791966259","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790223279","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790223719","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790272426","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790589998","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790589912","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790589914","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790589855","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790598593","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-trust-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1784821670","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-server-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1784821750","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-ui-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"0.7.38-2.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"libsolv-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:insights_proxy:1.5::el9"],"vendor":"Red Hat","product":"Red Hat Insights proxy 1.5","versions":[{"status":"unaffected","version":"1786433656","lessThan":"*","versionType":"rpm"}],"packageName":"insights-proxy/insights-proxy-container-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1790276886","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1790276884","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-tpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1790277045","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1790276889","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-spyre-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1790276974","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1790703497","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-tpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1790703506","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1790703590","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1790703568","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-spyre-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1790703586","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1790703494","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1790703542","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-neuron-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1784794818","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-kubernetes-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1784794778","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1784795112","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/haproxy-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1784794289","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1784795076","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241211","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-kubernetes-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787135742","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241260","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:4::el8"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 4 for Cloud Providers","packageName":"libsolv","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"}],"modified":"2026-10-14T19:28:10.329Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:21333","https://access.redhat.com/errata/RHSA-2026:28236","https://access.redhat.com/errata/RHSA-2026:36730","https://access.redhat.com/errata/RHSA-2026:39315","https://access.redhat.com/errata/RHSA-2026:44481","https://access.redhat.com/errata/RHSA-2026:46836","https://access.redhat.com/errata/RHSA-2026:48811","https://access.redhat.com/errata/RHSA-2026:48813","https://access.redhat.com/errata/RHSA-2026:48814","https://access.redhat.com/errata/RHSA-2026:48815","https://access.redhat.com/errata/RHSA-2026:48816","https://access.redhat.com/errata/RHSA-2026:48817","https://access.redhat.com/errata/RHSA-2026:48818","https://access.redhat.com/errata/RHSA-2026:49775","https://access.redhat.com/errata/RHSA-2026:50223","https://access.redhat.com/errata/RHSA-2026:53371","https://access.redhat.com/errata/RHSA-2026:56786","https://access.redhat.com/errata/RHSA-2026:56853","https://access.redhat.com/errata/RHSA-2026:56911","https://access.redhat.com/errata/RHSA-2026:57402","https://access.redhat.com/errata/RHSA-2026:57483","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:59831","https://access.redhat.com/errata/RHSA-2026:60019","https://access.redhat.com/errata/RHSA-2026:65839","https://access.redhat.com/errata/RHSA-2026:72394","https://access.redhat.com/errata/RHSA-2026:72395","https://access.redhat.com/errata/RHSA-2026:72399","https://access.redhat.com/errata/RHSA-2026:72470","https://access.redhat.com/errata/RHSA-2026:72475","https://access.redhat.com/errata/RHSA-2026:72476","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:73909","https://access.redhat.com/errata/RHSA-2026:73959","https://access.redhat.com/errata/RHSA-2026:73960","https://access.redhat.com/errata/RHSA-2026:73961","https://access.redhat.com/errata/RHSA-2026:73962","https://access.redhat.com/errata/RHSA-2026:74458","https://access.redhat.com/errata/RHSA-2026:74459","https://access.redhat.com/errata/RHSA-2026:74460","https://access.redhat.com/errata/RHSA-2026:74461","https://access.redhat.com/errata/RHSA-2026:74462","https://access.redhat.com/errata/RHSA-2026:74463","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/errata/RHSA-2026:82304","https://access.redhat.com/errata/RHSA-2026:82322","https://access.redhat.com/errata/RHSA-2026:82336","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:82888","https://access.redhat.com/security/cve/CVE-2026-48864","https://bugzilla.redhat.com/show_bug.cgi?id=2460425"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-48864","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-05-28T03:55:45.469552Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-05-28T13:28:44.209Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T19:28:10.329Z"}}},"related_cves":[{"value":"CVE-2026-48864","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23076,"advisory_id":"ab2c5960-3946-4575-9d20-f641158a8b93","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-42015","source_published_at":"2026-05-26T21:29:32.914+00:00","published_at":"2026-10-25T06:12:48.303469+00:00","extraction_method":"structured","technologies":["cert-manager-support-for-red-hat-openshift-release-1-17","cert-manager-support-for-red-hat-openshift-release-1-18","cert-manager-support-for-red-hat-openshift-release-1-20","core-cve","red-hat-discovery-2","red-hat-enterprise-linux-10","red-hat-enterprise-linux-10-0-extended-update-support","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7-extended-lifecycle-support","red-hat-enterprise-linux-8","red-hat-enterprise-linux-8-4-advanced-mission-critical-update-support","red-hat-enterprise-linux-8-4-extended-update-support-long-life-add-on","red-hat-enterprise-linux-8-6-advanced-mission-critical-update-support","red-hat-enterprise-linux-8-6-extended-update-support-long-life-add-on","red-hat-enterprise-linux-8-8-telecommunications-update-service","red-hat-enterprise-linux-8-8-update-services-for-sap-solutions","red-hat-enterprise-linux-9","red-hat-enterprise-linux-9-2-update-services-for-sap-solutions","red-hat-enterprise-linux-9-4-update-services-for-sap-solutions","red-hat-enterprise-linux-9-6-extended-update-support","red-hat-hardened-images","red-hat-openshift-ai-3-4","red-hat-openshift-container-platform-4","red-hat-update-infrastructure-5"],"cve_ids":["CVE-2026-42015"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling","summary":"A flaw was found in gnutls. An off-by-one error exists in the PKCS#12 bag element bounds check. This vulnerability allows an remote attacker to write past the internal array of a PKCS#12 bag when appending to a bag that already contains 32 elements. This memory corruption could lead to a denial of service (DoS) or potentially other unspecified impacts.","evidence":"cve:CVE-2026-42015","products":[{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10.0 Extended Update Support","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.6 Extended Update Support","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/31/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/32/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/33/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/34/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/35/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/36/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/37/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/38/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/39/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/40/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/41/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/42/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/43/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/44/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/45/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/46/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/47/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-42015","aliases":["CVE-2026-42015"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"versions":[{"status":"affected","version":"0"}],"packageName":"gnutls","collectionURL":"https://gitlab.com/gnutls/gnutls"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:3.8.10-4.el10_2","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.8.9-9.el10_0.19","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_els:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","versions":[{"status":"unaffected","version":"0:3.3.29-9.el7_9.2","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:3.6.16-8.el8_10.6","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:3.6.16-8.el8_10.6","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:3.6.14-10.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:4.13-3.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:3.6.14-10.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:4.13-3.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:3.6.16-5.el8_6.5","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:4.13-3.el8_6.2","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:3.6.16-5.el8_6.5","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:4.13-3.el8_6.2","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:3.6.16-7.el8_8.4","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:4.13-4.el8_8.1","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.6.16-7.el8_8.4","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:4.13-4.el8_8.1","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.8.10-4.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.8.10-4.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.2::appstream","cpe:/o:redhat:rhel_e4s:9.2::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.7.6-21.el9_2.7","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.4::appstream","cpe:/o:redhat:rhel_e4s:9.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.8.3-4.el9_4.6","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6::appstream","cpe:/o:redhat:rhel_eus:9.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.8.3-6.el9_6.4","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371080","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371069","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791788287","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791970484","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459707","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459711","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459759","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1789029076","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791966259","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790598593","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-trust-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1782159791","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-server-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1782166952","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-ui-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"3.8.13-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1790703542","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-neuron-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525684","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525671","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/haproxy-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525693","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525739","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241211","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-kubernetes-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787135742","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241260","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/ose-hypershift-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-14T19:25:37.820Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:13274","https://access.redhat.com/errata/RHSA-2026:20611","https://access.redhat.com/errata/RHSA-2026:20612","https://access.redhat.com/errata/RHSA-2026:20613","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:26409","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:30004","https://access.redhat.com/errata/RHSA-2026:30849","https://access.redhat.com/errata/RHSA-2026:30850","https://access.redhat.com/errata/RHSA-2026:32962","https://access.redhat.com/errata/RHSA-2026:33125","https://access.redhat.com/errata/RHSA-2026:41921","https://access.redhat.com/errata/RHSA-2026:43575","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/errata/RHSA-2026:82304","https://access.redhat.com/errata/RHSA-2026:82322","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:82888","https://access.redhat.com/security/cve/CVE-2026-42015","https://bugzilla.redhat.com/show_bug.cgi?id=2467678","https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-11"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-42015","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-05-27T12:47:07.830892Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-05-27T12:47:17.572Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T19:25:37.820Z"}}},"related_cves":[{"value":"CVE-2026-42015","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23075,"advisory_id":"60c903a9-167c-43d8-8015-acdfd93b8492","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-42013","source_published_at":"2026-05-26T21:29:32.887+00:00","published_at":"2026-10-25T06:12:47.652022+00:00","extraction_method":"structured","technologies":["cert-manager-support-for-red-hat-openshift-release-1-17","cert-manager-support-for-red-hat-openshift-release-1-18","cert-manager-support-for-red-hat-openshift-release-1-20","core-cve","red-hat-discovery-2","red-hat-enterprise-linux-10","red-hat-enterprise-linux-10-0-extended-update-support","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7-extended-lifecycle-support","red-hat-enterprise-linux-8","red-hat-enterprise-linux-8-4-advanced-mission-critical-update-support","red-hat-enterprise-linux-8-4-extended-update-support-long-life-add-on","red-hat-enterprise-linux-8-6-advanced-mission-critical-update-support","red-hat-enterprise-linux-8-6-extended-update-support-long-life-add-on","red-hat-enterprise-linux-8-8-telecommunications-update-service","red-hat-enterprise-linux-8-8-update-services-for-sap-solutions","red-hat-enterprise-linux-9","red-hat-enterprise-linux-9-2-update-services-for-sap-solutions","red-hat-enterprise-linux-9-4-update-services-for-sap-solutions","red-hat-enterprise-linux-9-6-extended-update-support","red-hat-hardened-images","red-hat-openshift-ai-3-4","red-hat-openshift-container-platform-4","red-hat-openshift-container-platform-4-12","red-hat-openshift-container-platform-4-16","red-hat-openshift-container-platform-4-17","red-hat-openshift-container-platform-4-18","red-hat-openshift-container-platform-4-19","red-hat-update-infrastructure-5"],"cve_ids":["CVE-2026-42013"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name","summary":"A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name (SAN) could cause the validation process to incorrectly fall back to checking the Common Name (CN) field. This could allow a remote attacker to bypass proper certificate validation, potentially leading to spoofing or man-in-the-middle attacks.","evidence":"cve:CVE-2026-42013","products":[{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10.0 Extended Update Support","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.6 Extended Update Support","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.12","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.16","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.17","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.18","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.19","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/31/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/32/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/33/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/34/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/35/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/36/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/37/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/38/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/39/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/40/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/41/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/42/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/43/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/44/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/45/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/46/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/47/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/48/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/49/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/50/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-42013","aliases":["CVE-2026-42013"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}}],"affected":[{"versions":[{"status":"affected","version":"0"}],"packageName":"gnutls","collectionURL":"https://gitlab.com/gnutls/gnutls"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:3.8.10-4.el10_2","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.8.9-9.el10_0.19","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_els:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","versions":[{"status":"unaffected","version":"0:3.3.29-9.el7_9.2","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:3.6.16-8.el8_10.6","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:3.6.16-8.el8_10.6","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:3.6.14-10.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:4.13-3.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:3.6.14-10.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:4.13-3.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:3.6.16-5.el8_6.5","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:4.13-3.el8_6.2","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:3.6.16-5.el8_6.5","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:4.13-3.el8_6.2","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:3.6.16-7.el8_8.4","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:4.13-4.el8_8.1","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.6.16-7.el8_8.4","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:4.13-4.el8_8.1","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.8.10-4.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.8.10-4.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.2::appstream","cpe:/o:redhat:rhel_e4s:9.2::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.7.6-21.el9_2.7","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.4::appstream","cpe:/o:redhat:rhel_e4s:9.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.8.3-4.el9_4.6","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6::appstream","cpe:/o:redhat:rhel_eus:9.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.8.3-6.el9_6.4","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.12::el8"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.12","versions":[{"status":"unaffected","version":"412.86.202608241157-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.16::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.16","versions":[{"status":"unaffected","version":"416.94.202608150307-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.17::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.17","versions":[{"status":"unaffected","version":"417.94.202608250221-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.18::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.18","versions":[{"status":"unaffected","version":"418.94.202608142238-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.19::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.19","versions":[{"status":"unaffected","version":"4.19.9.6.202607151909-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371080","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371069","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791788287","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791970484","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459707","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459711","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459759","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1789029076","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791966259","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790598593","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-trust-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1782159791","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-server-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1782166952","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-ui-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"3.8.13-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1790703542","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-neuron-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525684","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525671","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/haproxy-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525693","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525739","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241211","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-kubernetes-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787135742","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241260","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/ose-hypershift-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"}],"modified":"2026-10-14T19:25:31.708Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:13274","https://access.redhat.com/errata/RHSA-2026:20611","https://access.redhat.com/errata/RHSA-2026:20612","https://access.redhat.com/errata/RHSA-2026:20613","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:26409","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:30004","https://access.redhat.com/errata/RHSA-2026:30849","https://access.redhat.com/errata/RHSA-2026:30850","https://access.redhat.com/errata/RHSA-2026:32962","https://access.redhat.com/errata/RHSA-2026:33125","https://access.redhat.com/errata/RHSA-2026:40762","https://access.redhat.com/errata/RHSA-2026:41921","https://access.redhat.com/errata/RHSA-2026:43575","https://access.redhat.com/errata/RHSA-2026:56853","https://access.redhat.com/errata/RHSA-2026:57483","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:59831","https://access.redhat.com/errata/RHSA-2026:60019","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/errata/RHSA-2026:82304","https://access.redhat.com/errata/RHSA-2026:82322","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:82888","https://access.redhat.com/security/cve/CVE-2026-42013","https://bugzilla.redhat.com/show_bug.cgi?id=2467448","https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-8"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-42013","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-05-28T14:13:44.668002Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-05-28T14:13:58.434Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T19:25:31.708Z"}}},"related_cves":[{"value":"CVE-2026-42013","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23074,"advisory_id":"762717c2-17f4-4202-b9c8-2bbdb18371c8","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-42014","source_published_at":"2026-06-16T00:49:15.162+00:00","published_at":"2026-10-25T06:12:47.060252+00:00","extraction_method":"structured","technologies":["cert-manager-support-for-red-hat-openshift-release-1-17","cert-manager-support-for-red-hat-openshift-release-1-18","cert-manager-support-for-red-hat-openshift-release-1-20","core-cve","red-hat-discovery-2","red-hat-enterprise-linux-10","red-hat-enterprise-linux-10-0-extended-update-support","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7-extended-lifecycle-support","red-hat-enterprise-linux-8","red-hat-enterprise-linux-8-4-advanced-mission-critical-update-support","red-hat-enterprise-linux-8-4-extended-update-support-long-life-add-on","red-hat-enterprise-linux-8-6-advanced-mission-critical-update-support","red-hat-enterprise-linux-8-6-extended-update-support-long-life-add-on","red-hat-enterprise-linux-8-8-telecommunications-update-service","red-hat-enterprise-linux-8-8-update-services-for-sap-solutions","red-hat-enterprise-linux-9","red-hat-enterprise-linux-9-2-update-services-for-sap-solutions","red-hat-enterprise-linux-9-4-update-services-for-sap-solutions","red-hat-enterprise-linux-9-6-extended-update-support","red-hat-hardened-images","red-hat-openshift-ai-3-4","red-hat-openshift-container-platform-4","red-hat-update-infrastructure-5"],"cve_ids":["CVE-2026-42014"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin","summary":"A flaw was found in GnuTLS. The `gnutls_pkcs11_token_set_pin` function, used for changing the Security Officer PIN, can lead to a use-after-free vulnerability. This occurs when an attacker attempts to change the PIN with a NULL old PIN for a token that lacks a protected authentication path.","evidence":"cve:CVE-2026-42014","products":[{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10.0 Extended Update Support","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.6 Extended Update Support","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/31/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/32/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/33/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/34/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/35/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/36/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/37/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/38/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/39/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/40/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/41/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/42/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/43/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/44/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/45/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/46/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/47/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-42014","aliases":["CVE-2026-42014"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.6,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"LOW"}}],"affected":[{"versions":[{"status":"affected","version":"0"}],"packageName":"gnutls","collectionURL":"https://gitlab.com/gnutls/gnutls"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:3.8.10-4.el10_2","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.8.9-9.el10_0.19","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_els:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","versions":[{"status":"unaffected","version":"0:3.3.29-9.el7_9.2","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:3.6.16-8.el8_10.6","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:3.6.16-8.el8_10.6","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:3.6.14-10.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:4.13-3.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:3.6.14-10.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:4.13-3.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:3.6.16-5.el8_6.5","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:4.13-3.el8_6.2","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:3.6.16-5.el8_6.5","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:4.13-3.el8_6.2","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:3.6.16-7.el8_8.4","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:4.13-4.el8_8.1","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.6.16-7.el8_8.4","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:4.13-4.el8_8.1","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.8.10-4.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.8.10-4.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.2::appstream","cpe:/o:redhat:rhel_e4s:9.2::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.7.6-21.el9_2.7","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.4::appstream","cpe:/o:redhat:rhel_e4s:9.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.8.3-4.el9_4.6","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6::appstream","cpe:/o:redhat:rhel_eus:9.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.8.3-6.el9_6.4","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371080","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371069","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791788287","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791970484","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459707","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459711","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459759","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1789029076","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791966259","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790598593","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-trust-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1782159791","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-server-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1782166952","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-ui-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"3.8.13-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1790703542","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-neuron-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525684","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525671","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/haproxy-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525693","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525739","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241211","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-kubernetes-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787135742","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241260","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/ose-hypershift-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-14T19:25:35.226Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:13274","https://access.redhat.com/errata/RHSA-2026:20611","https://access.redhat.com/errata/RHSA-2026:20612","https://access.redhat.com/errata/RHSA-2026:20613","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:26409","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:30004","https://access.redhat.com/errata/RHSA-2026:30849","https://access.redhat.com/errata/RHSA-2026:30850","https://access.redhat.com/errata/RHSA-2026:32962","https://access.redhat.com/errata/RHSA-2026:33125","https://access.redhat.com/errata/RHSA-2026:41921","https://access.redhat.com/errata/RHSA-2026:43575","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/errata/RHSA-2026:82304","https://access.redhat.com/errata/RHSA-2026:82322","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:82888","https://access.redhat.com/security/cve/CVE-2026-42014","https://bugzilla.redhat.com/show_bug.cgi?id=2467451","https://gitlab.com/gnutls/gnutls/-/issues/1766","https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-9"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-42014","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-06-16T15:22:20.545240Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-06-16T17:10:49.943Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T19:25:35.226Z"}}},"related_cves":[{"value":"CVE-2026-42014","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23073,"advisory_id":"b7412276-6b2a-4b95-a98f-96acb5ce775d","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-42012","source_published_at":"2026-05-26T21:29:26.859+00:00","published_at":"2026-10-25T06:12:46.465639+00:00","extraction_method":"structured","technologies":["cert-manager-support-for-red-hat-openshift-release-1-17","cert-manager-support-for-red-hat-openshift-release-1-18","cert-manager-support-for-red-hat-openshift-release-1-20","core-cve","red-hat-discovery-2","red-hat-enterprise-linux-10","red-hat-enterprise-linux-10-0-extended-update-support","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7-extended-lifecycle-support","red-hat-enterprise-linux-8","red-hat-enterprise-linux-8-4-advanced-mission-critical-update-support","red-hat-enterprise-linux-8-4-extended-update-support-long-life-add-on","red-hat-enterprise-linux-8-6-advanced-mission-critical-update-support","red-hat-enterprise-linux-8-6-extended-update-support-long-life-add-on","red-hat-enterprise-linux-8-8-telecommunications-update-service","red-hat-enterprise-linux-8-8-update-services-for-sap-solutions","red-hat-enterprise-linux-9","red-hat-enterprise-linux-9-2-update-services-for-sap-solutions","red-hat-enterprise-linux-9-4-update-services-for-sap-solutions","red-hat-enterprise-linux-9-6-extended-update-support","red-hat-hardened-images","red-hat-openshift-ai-3-4","red-hat-openshift-container-platform-4","red-hat-update-infrastructure-5"],"cve_ids":["CVE-2026-42012"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans","summary":"A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource Identifier (URI) or Service (SRV) Subject Alternative Names (SANs). This could cause the certificate validation process to incorrectly fall back to checking DNS hostnames against the Common Name (CN), potentially allowing the attacker to spoof legitimate services or intercept sensitive information.","evidence":"cve:CVE-2026-42012","products":[{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10.0 Extended Update Support","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.6 Extended Update Support","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/31/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/32/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/33/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/34/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/35/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/36/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/37/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/38/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/39/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/40/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/41/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/42/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/43/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/44/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/45/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/46/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/47/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-42012","aliases":["CVE-2026-42012"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}}],"affected":[{"versions":[{"status":"affected","version":"0"}],"packageName":"gnutls","collectionURL":"https://gitlab.com/gnutls/gnutls"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:3.8.10-4.el10_2","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.8.9-9.el10_0.19","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_els:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","versions":[{"status":"unaffected","version":"0:3.3.29-9.el7_9.2","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:3.6.16-8.el8_10.6","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:3.6.16-8.el8_10.6","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:3.6.14-10.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:4.13-3.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:3.6.14-10.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:4.13-3.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:3.6.16-5.el8_6.5","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:4.13-3.el8_6.2","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:3.6.16-5.el8_6.5","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:4.13-3.el8_6.2","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:3.6.16-7.el8_8.4","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:4.13-4.el8_8.1","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.6.16-7.el8_8.4","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:4.13-4.el8_8.1","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.8.10-4.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.8.10-4.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.2::appstream","cpe:/o:redhat:rhel_e4s:9.2::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.7.6-21.el9_2.7","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.4::appstream","cpe:/o:redhat:rhel_e4s:9.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.8.3-4.el9_4.6","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6::appstream","cpe:/o:redhat:rhel_eus:9.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.8.3-6.el9_6.4","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371080","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371069","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791788287","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791970484","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459707","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459711","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459759","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1789029076","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791966259","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790598593","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-trust-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1782159791","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-server-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1782166952","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-ui-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"3.8.13-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1790703542","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-neuron-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525684","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525671","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/haproxy-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525693","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525739","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241211","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-kubernetes-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787135742","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241260","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/ose-hypershift-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-14T19:25:28.140Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:13274","https://access.redhat.com/errata/RHSA-2026:20611","https://access.redhat.com/errata/RHSA-2026:20612","https://access.redhat.com/errata/RHSA-2026:20613","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:26409","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:30004","https://access.redhat.com/errata/RHSA-2026:30849","https://access.redhat.com/errata/RHSA-2026:30850","https://access.redhat.com/errata/RHSA-2026:32962","https://access.redhat.com/errata/RHSA-2026:33125","https://access.redhat.com/errata/RHSA-2026:41921","https://access.redhat.com/errata/RHSA-2026:43575","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/errata/RHSA-2026:82304","https://access.redhat.com/errata/RHSA-2026:82322","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:82888","https://access.redhat.com/security/cve/CVE-2026-42012","https://bugzilla.redhat.com/show_bug.cgi?id=2467441","https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-7"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-42012","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-05-27T14:21:46.048016Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-05-27T14:21:54.475Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T19:25:28.140Z"}}},"related_cves":[{"value":"CVE-2026-42012","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23072,"advisory_id":"7e1c2757-742d-4bd0-a28a-d5dc5844493c","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-42011","source_published_at":"2026-05-07T13:51:04.695+00:00","published_at":"2026-10-25T06:12:45.871615+00:00","extraction_method":"structured","technologies":["cert-manager-support-for-red-hat-openshift-release-1-17","cert-manager-support-for-red-hat-openshift-release-1-18","cert-manager-support-for-red-hat-openshift-release-1-20","core-cve","red-hat-discovery-2","red-hat-enterprise-linux-10","red-hat-enterprise-linux-10-0-extended-update-support","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7-extended-lifecycle-support","red-hat-enterprise-linux-8","red-hat-enterprise-linux-8-4-advanced-mission-critical-update-support","red-hat-enterprise-linux-8-4-extended-update-support-long-life-add-on","red-hat-enterprise-linux-8-6-advanced-mission-critical-update-support","red-hat-enterprise-linux-8-6-extended-update-support-long-life-add-on","red-hat-enterprise-linux-8-8-telecommunications-update-service","red-hat-enterprise-linux-8-8-update-services-for-sap-solutions","red-hat-enterprise-linux-9","red-hat-enterprise-linux-9-2-update-services-for-sap-solutions","red-hat-enterprise-linux-9-4-update-services-for-sap-solutions","red-hat-enterprise-linux-9-6-extended-update-support","red-hat-hardened-images","red-hat-openshift-ai-3-4","red-hat-openshift-container-platform-4","red-hat-openshift-container-platform-4-12","red-hat-openshift-container-platform-4-16","red-hat-openshift-container-platform-4-17","red-hat-openshift-container-platform-4-18","red-hat-openshift-container-platform-4-19","red-hat-update-infrastructure-5"],"cve_ids":["CVE-2026-42011"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Gnutls: gnutls: security bypass due to incorrect name constraint handling","summary":"A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities (CAs) only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during certificate validation. This bypass could lead to the acceptance of invalid certificates, potentially enabling spoofing or man-in-the-middle attacks against affected systems.","evidence":"cve:CVE-2026-42011","products":[{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10.0 Extended Update Support","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.6 Extended Update Support","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.12","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.16","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.17","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.18","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.19","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/31/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/32/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/33/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/34/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/35/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/36/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/37/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/38/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/39/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/40/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/41/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/42/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/43/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/44/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/45/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/46/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/47/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/48/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/49/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/50/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-42011","aliases":["CVE-2026-42011"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.4,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"versions":[{"status":"affected","version":"0"}],"packageName":"gnutls","collectionURL":"https://gitlab.com/gnutls/gnutls"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:3.8.10-4.el10_2","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.8.9-9.el10_0.19","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_els:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","versions":[{"status":"unaffected","version":"0:3.3.29-9.el7_9.2","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:3.6.16-8.el8_10.6","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:3.6.16-8.el8_10.6","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:3.6.14-10.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:4.13-3.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:3.6.14-10.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:4.13-3.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:3.6.16-5.el8_6.5","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:4.13-3.el8_6.2","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:3.6.16-5.el8_6.5","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:4.13-3.el8_6.2","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:3.6.16-7.el8_8.4","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:4.13-4.el8_8.1","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.6.16-7.el8_8.4","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:4.13-4.el8_8.1","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.8.10-4.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.8.10-4.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.2::appstream","cpe:/o:redhat:rhel_e4s:9.2::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.7.6-21.el9_2.7","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.4::appstream","cpe:/o:redhat:rhel_e4s:9.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.8.3-4.el9_4.6","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6::appstream","cpe:/o:redhat:rhel_eus:9.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.8.3-6.el9_6.4","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.12::el8"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.12","versions":[{"status":"unaffected","version":"412.86.202608241157-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.16::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.16","versions":[{"status":"unaffected","version":"416.94.202608150307-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.17::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.17","versions":[{"status":"unaffected","version":"417.94.202608250221-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.18::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.18","versions":[{"status":"unaffected","version":"418.94.202608142238-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.19::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.19","versions":[{"status":"unaffected","version":"4.19.9.6.202607151909-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371080","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371069","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791788287","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791970484","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459707","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459711","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459759","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1789029076","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791966259","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790598593","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-trust-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1782159791","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-server-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1782166952","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-ui-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"3.8.13-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1790703542","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-neuron-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525684","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525671","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/haproxy-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525693","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525739","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241211","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-kubernetes-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787135742","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241260","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/ose-hypershift-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"}],"modified":"2026-10-14T19:25:25.848Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:13274","https://access.redhat.com/errata/RHSA-2026:20611","https://access.redhat.com/errata/RHSA-2026:20612","https://access.redhat.com/errata/RHSA-2026:20613","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:26409","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:30004","https://access.redhat.com/errata/RHSA-2026:30849","https://access.redhat.com/errata/RHSA-2026:30850","https://access.redhat.com/errata/RHSA-2026:32962","https://access.redhat.com/errata/RHSA-2026:33125","https://access.redhat.com/errata/RHSA-2026:40762","https://access.redhat.com/errata/RHSA-2026:41921","https://access.redhat.com/errata/RHSA-2026:43575","https://access.redhat.com/errata/RHSA-2026:56853","https://access.redhat.com/errata/RHSA-2026:57483","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:59831","https://access.redhat.com/errata/RHSA-2026:60019","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/errata/RHSA-2026:82304","https://access.redhat.com/errata/RHSA-2026:82322","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:82888","https://access.redhat.com/security/cve/CVE-2026-42011","https://bugzilla.redhat.com/show_bug.cgi?id=2467437","https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-6"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-42011","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-05-07T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-05-08T03:55:47.296Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T19:25:25.848Z"}}},"related_cves":[{"value":"CVE-2026-42011","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23071,"advisory_id":"7d729381-a2dd-42e9-b3d4-7e279e44077f","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-2100","source_published_at":"2026-03-26T20:01:46.174+00:00","published_at":"2026-10-25T06:12:45.246592+00:00","extraction_method":"structured","technologies":["cert-manager-support-for-red-hat-openshift-release-1-17","cert-manager-support-for-red-hat-openshift-release-1-18","cert-manager-support-for-red-hat-openshift-release-1-20","core-cve","cost-management-4","p11-kit","red-hat-enterprise-linux-10","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9","red-hat-hardened-images","red-hat-insights-proxy-1-5","red-hat-openshift-container-platform-4","red-hat-update-infrastructure-5"],"cve_ids":["CVE-2026-2100"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"P11-kit: null dereference via c_derivekey with specific null parameters","summary":"A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with specific IBM kyber or IBM btc derive mechanism parameters set to NULL. This could lead to the RPC-client attempting to return an uninitialized value, potentially resulting in a NULL dereference or undefined behavior. This issue may cause an application level denial of service or other unpredictable system states.","evidence":"cve:CVE-2026-2100","products":[{"name":{"value":"p11-kit","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cost Management 4","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Insights proxy 1.5","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-2100","aliases":["CVE-2026-2100"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"repo":"https://github.com/p11-glue/p11-kit","vendor":"p11-glue","product":"p11-kit","versions":[{"status":"affected","version":"0","lessThan":"0.26.2","versionType":"semver"}],"defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:0.26.2-1.el10","lessThan":"*","versionType":"rpm"}],"packageName":"p11-kit","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:0.26.2-1.el9","lessThan":"*","versionType":"rpm"}],"packageName":"p11-kit","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:0.26.2-1.el9","lessThan":"*","versionType":"rpm"}],"packageName":"p11-kit","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371080","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371069","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791788287","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791970484","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459707","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459711","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459759","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1789029076","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791966259","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790598593","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-trust-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cost_management:4::el9"],"vendor":"Red Hat","product":"Cost Management 4","versions":[{"status":"unaffected","version":"1780946239","lessThan":"*","versionType":"rpm"}],"packageName":"costmanagement/costmanagement-metrics-rhel9-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"0.26.2-1.1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"p11-kit-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:insights_proxy:1.5::el9"],"vendor":"Red Hat","product":"Red Hat Insights proxy 1.5","versions":[{"status":"unaffected","version":"1780420428","lessThan":"*","versionType":"rpm"}],"packageName":"insights-proxy/insights-proxy-container-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1779798159","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1779798164","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/haproxy-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1779798165","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1779798222","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241211","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-kubernetes-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787135742","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241260","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"p11-kit","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"p11-kit","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"p11-kit","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/ose-hypershift-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"}],"modified":"2026-10-14T19:24:02.035Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:18143","https://access.redhat.com/errata/RHSA-2026:18599","https://access.redhat.com/errata/RHSA-2026:21275","https://access.redhat.com/errata/RHSA-2026:22634","https://access.redhat.com/errata/RHSA-2026:27998","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:7065","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:82304","https://access.redhat.com/errata/RHSA-2026:82322","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:82888","https://access.redhat.com/security/cve/CVE-2026-2100","https://bugzilla.redhat.com/show_bug.cgi?id=2437308","https://github.com/p11-glue/p11-kit/pull/740","https://github.com/p11-glue/p11-kit/releases/tag/0.26.2"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-2100","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-03-26T20:30:34.453809Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-03-26T20:30:53.390Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T19:24:02.035Z"}}},"related_cves":[{"value":"CVE-2026-2100","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23070,"advisory_id":"73afb3b3-339d-4bd9-b059-de9d9915c35c","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-3833","source_published_at":"2026-04-30T17:37:05.818+00:00","published_at":"2026-10-25T06:12:44.355887+00:00","extraction_method":"structured","technologies":["cert-manager-support-for-red-hat-openshift-release-1-17","cert-manager-support-for-red-hat-openshift-release-1-18","cert-manager-support-for-red-hat-openshift-release-1-20","core-cve","red-hat-discovery-2","red-hat-enterprise-linux-10","red-hat-enterprise-linux-10-0-extended-update-support","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7-extended-lifecycle-support","red-hat-enterprise-linux-8","red-hat-enterprise-linux-8-4-advanced-mission-critical-update-support","red-hat-enterprise-linux-8-4-extended-update-support-long-life-add-on","red-hat-enterprise-linux-8-6-advanced-mission-critical-update-support","red-hat-enterprise-linux-8-6-extended-update-support-long-life-add-on","red-hat-enterprise-linux-8-8-telecommunications-update-service","red-hat-enterprise-linux-8-8-update-services-for-sap-solutions","red-hat-enterprise-linux-9","red-hat-enterprise-linux-9-2-update-services-for-sap-solutions","red-hat-enterprise-linux-9-4-update-services-for-sap-solutions","red-hat-enterprise-linux-9-6-extended-update-support","red-hat-hardened-images","red-hat-openshift-ai-3-4","red-hat-openshift-container-platform-4","red-hat-openshift-container-platform-4-12","red-hat-openshift-container-platform-4-13","red-hat-openshift-container-platform-4-14","red-hat-openshift-container-platform-4-15","red-hat-openshift-container-platform-4-16","red-hat-openshift-container-platform-4-17","red-hat-openshift-container-platform-4-18","red-hat-openshift-container-platform-4-19","red-hat-update-infrastructure-5"],"cve_ids":["CVE-2026-3833"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison","summary":"A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constraints within `excludedSubtrees` or `permittedSubtrees`. A remote attacker can exploit this by crafting a leaf certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass where a certificate that should be rejected is instead accepted. This could result in unauthorized access or information disclosure.","evidence":"cve:CVE-2026-3833","products":[{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10.0 Extended Update Support","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.6 Extended Update Support","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.12","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.13","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.14","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.15","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.16","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.17","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.18","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.19","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/31/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/32/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/33/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/34/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/35/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/36/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/37/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/38/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/39/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/40/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/41/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/42/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/43/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/44/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/45/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/46/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/47/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/48/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/49/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/50/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/51/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/52/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/53/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-3833","aliases":["CVE-2026-3833"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}}],"affected":[{"versions":[{"status":"affected","version":"0","lessThan":"3.8.13","versionType":"semver"}],"packageName":"gnutls","collectionURL":"https://gitlab.com/gnutls/gnutls","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:3.8.10-4.el10_2","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.8.9-9.el10_0.19","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_els:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","versions":[{"status":"unaffected","version":"0:3.3.29-9.el7_9.2","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:3.6.16-8.el8_10.6","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:3.6.16-8.el8_10.6","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:3.6.14-10.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:4.13-3.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:3.6.14-10.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:4.13-3.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:3.6.16-5.el8_6.5","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:4.13-3.el8_6.2","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:3.6.16-5.el8_6.5","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:4.13-3.el8_6.2","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:3.6.16-7.el8_8.4","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:4.13-4.el8_8.1","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.6.16-7.el8_8.4","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:4.13-4.el8_8.1","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.8.10-4.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.8.10-4.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.2::appstream","cpe:/o:redhat:rhel_e4s:9.2::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.7.6-21.el9_2.7","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.4::appstream","cpe:/o:redhat:rhel_e4s:9.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.8.3-4.el9_4.6","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6::appstream","cpe:/o:redhat:rhel_eus:9.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.8.3-6.el9_6.4","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.12::el8"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.12","versions":[{"status":"unaffected","version":"412.86.202608241157-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.13::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.13","versions":[{"status":"unaffected","version":"413.92.202609080414-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.14::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.14","versions":[{"status":"unaffected","version":"414.92.202609011250-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.15::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.15","versions":[{"status":"unaffected","version":"415.92.202609140326-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.16::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.16","versions":[{"status":"unaffected","version":"416.94.202609011112-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.17::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.17","versions":[{"status":"unaffected","version":"417.94.202608250221-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.18::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.18","versions":[{"status":"unaffected","version":"418.94.202609031320-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.19::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.19","versions":[{"status":"unaffected","version":"4.19.9.6.202608182320-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371080","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371069","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791788287","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791970484","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459707","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459711","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459759","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1789029076","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791966259","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790598593","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-trust-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1782159791","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-server-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1782166952","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-ui-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"3.8.13-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1790703542","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-neuron-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525684","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525671","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/haproxy-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525693","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1781525739","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241211","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-kubernetes-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787135742","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241260","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/ose-hypershift-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"}],"modified":"2026-10-14T19:24:09.620Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:13274","https://access.redhat.com/errata/RHSA-2026:20611","https://access.redhat.com/errata/RHSA-2026:20612","https://access.redhat.com/errata/RHSA-2026:20613","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:26409","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:30004","https://access.redhat.com/errata/RHSA-2026:30849","https://access.redhat.com/errata/RHSA-2026:30850","https://access.redhat.com/errata/RHSA-2026:32962","https://access.redhat.com/errata/RHSA-2026:33125","https://access.redhat.com/errata/RHSA-2026:41921","https://access.redhat.com/errata/RHSA-2026:43575","https://access.redhat.com/errata/RHSA-2026:57402","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:59831","https://access.redhat.com/errata/RHSA-2026:60019","https://access.redhat.com/errata/RHSA-2026:62409","https://access.redhat.com/errata/RHSA-2026:62549","https://access.redhat.com/errata/RHSA-2026:65839","https://access.redhat.com/errata/RHSA-2026:65851","https://access.redhat.com/errata/RHSA-2026:67857","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/errata/RHSA-2026:82304","https://access.redhat.com/errata/RHSA-2026:82322","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:82888","https://access.redhat.com/security/cve/CVE-2026-3833","https://bugzilla.redhat.com/show_bug.cgi?id=2445763","https://gitlab.com/gnutls/gnutls/-/issues/1803"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-3833","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-04-30T18:37:27.251775Z"}}}],"references":[{"url":"https://gitlab.com/gnutls/gnutls/-/issues/1803","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-04-30T18:37:57.245Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T19:24:09.620Z"}}},"related_cves":[{"value":"CVE-2026-3833","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23067,"advisory_id":"813ddb32-5f52-4373-9b5a-f8ede38176cb","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-14164","source_published_at":"2026-06-30T06:29:23.549+00:00","published_at":"2026-10-25T06:12:42.610295+00:00","extraction_method":"structured","technologies":["cert-manager-support-for-red-hat-openshift-release-1-17","cert-manager-support-for-red-hat-openshift-release-1-18","cert-manager-support-for-red-hat-openshift-release-1-20","core-cve","red-hat-ai-inference-server-3-5","red-hat-discovery-2","red-hat-enterprise-linux-10","red-hat-enterprise-linux-10-0-extended-update-support","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9","red-hat-enterprise-linux-9-2-update-services-for-sap-solutions","red-hat-enterprise-linux-9-4-update-services-for-sap-solutions","red-hat-enterprise-linux-9-6-extended-update-support","red-hat-hardened-images","red-hat-openshift-ai-3-0","red-hat-openshift-ai-3-2","red-hat-openshift-ai-3-4","red-hat-openshift-container-platform-4","red-hat-openshift-container-platform-4-13","red-hat-openshift-container-platform-4-14","red-hat-openshift-container-platform-4-15","red-hat-openshift-container-platform-4-16","red-hat-openshift-container-platform-4-17","red-hat-openshift-container-platform-4-18","red-hat-openshift-container-platform-4-19","red-hat-openshift-container-platform-4-20","red-hat-openshift-container-platform-4-21","red-hat-openshift-container-platform-4-22","red-hat-update-infrastructure-5"],"cve_ids":["CVE-2026-14164"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()","summary":"A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filtered_buf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of the same memory region, resulting in a double-free condition. Successful exploitation may cause applications using the vulnerable libarchive API to terminate unexpectedly, leading to a denial of service.","evidence":"cve:CVE-2026-14164","products":[{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10.0 Extended Update Support","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.6 Extended Update Support","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.13","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.14","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.15","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.16","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.17","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.18","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.18","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.19","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.20","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.21","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.22","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/31/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/32/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/33/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/34/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/35/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AI Inference Server 3.5","evidence":"/containers/cna/affected/36/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AI Inference Server 3.5","evidence":"/containers/cna/affected/37/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/38/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/39/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/40/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/41/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/42/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/43/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/44/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/45/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/46/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/47/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/48/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/49/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/50/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/51/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/52/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/53/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/54/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/55/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/56/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/57/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/58/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/59/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/60/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/61/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/62/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/63/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/64/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-14164","aliases":["CVE-2026-14164"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:3.7.7-10.el10_2","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.7.7-5.el10_0.1","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.5.3-11.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.5.3-11.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.2::appstream","cpe:/o:redhat:rhel_e4s:9.2::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.5.3-5.el9_2.3","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.4::appstream","cpe:/o:redhat:rhel_e4s:9.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.5.3-5.el9_4.2","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6::appstream","cpe:/o:redhat:rhel_eus:9.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.5.3-7.el9_6.2","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.13::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.13","versions":[{"status":"unaffected","version":"413.92.202609080414-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.14::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.14","versions":[{"status":"unaffected","version":"414.92.202609011250-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.15::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.15","versions":[{"status":"unaffected","version":"415.92.202609140326-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.16::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.16","versions":[{"status":"unaffected","version":"416.94.202609140240-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.17::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.17","versions":[{"status":"unaffected","version":"417.94.202609191027-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.18::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.18","versions":[{"status":"unaffected","version":"418.94.202609031320-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.18::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.18","versions":[{"status":"unaffected","version":"418.94.202609171815-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.19::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.19","versions":[{"status":"unaffected","version":"4.19.9.6.202609021231-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.20::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.20","versions":[{"status":"unaffected","version":"4.20.9.6.202609021029-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.21::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.21","versions":[{"status":"unaffected","version":"4.21.9.6.202609021100-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.22::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.22","versions":[{"status":"unaffected","version":"4.22.9.8.202608130832-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371080","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371069","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791788287","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791378395","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791970484","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459707","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459711","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459759","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1789029076","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791966259","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790223279","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790223719","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790272426","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790589998","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790589912","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790589914","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790589855","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790598593","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-trust-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.5::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.5","versions":[{"status":"unaffected","version":"1791427182","lessThan":"*","versionType":"rpm"}],"packageName":"rhaii/vllm-gaudi-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.5::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.5","versions":[{"status":"unaffected","version":"1791818357","lessThan":"*","versionType":"rpm"}],"packageName":"rhaii/vllm-spyre-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1786638573","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-server-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1788206196","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-ui-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"3.8.8-2.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1790276886","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1790276884","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-tpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1790277045","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1790276889","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-spyre-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1790276974","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1790703497","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-tpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1790703506","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1790703590","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1790703568","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-spyre-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1790703586","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1790703494","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1790703542","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-neuron-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1786435241","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-kubernetes-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1786533457","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1786533449","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/haproxy-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1786435483","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1786533529","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241211","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-kubernetes-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787135742","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241260","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"}],"modified":"2026-10-14T19:24:49.682Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:30333","https://access.redhat.com/errata/RHSA-2026:52674","https://access.redhat.com/errata/RHSA-2026:52675","https://access.redhat.com/errata/RHSA-2026:54387","https://access.redhat.com/errata/RHSA-2026:54760","https://access.redhat.com/errata/RHSA-2026:54769","https://access.redhat.com/errata/RHSA-2026:56954","https://access.redhat.com/errata/RHSA-2026:58558","https://access.redhat.com/errata/RHSA-2026:58573","https://access.redhat.com/errata/RHSA-2026:58574","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:61783","https://access.redhat.com/errata/RHSA-2026:62409","https://access.redhat.com/errata/RHSA-2026:63041","https://access.redhat.com/errata/RHSA-2026:63044","https://access.redhat.com/errata/RHSA-2026:63100","https://access.redhat.com/errata/RHSA-2026:65839","https://access.redhat.com/errata/RHSA-2026:65851","https://access.redhat.com/errata/RHSA-2026:67857","https://access.redhat.com/errata/RHSA-2026:67935","https://access.redhat.com/errata/RHSA-2026:70586","https://access.redhat.com/errata/RHSA-2026:70615","https://access.redhat.com/errata/RHSA-2026:72394","https://access.redhat.com/errata/RHSA-2026:72395","https://access.redhat.com/errata/RHSA-2026:72399","https://access.redhat.com/errata/RHSA-2026:72470","https://access.redhat.com/errata/RHSA-2026:72475","https://access.redhat.com/errata/RHSA-2026:72476","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:73909","https://access.redhat.com/errata/RHSA-2026:73959","https://access.redhat.com/errata/RHSA-2026:73960","https://access.redhat.com/errata/RHSA-2026:73961","https://access.redhat.com/errata/RHSA-2026:73962","https://access.redhat.com/errata/RHSA-2026:74458","https://access.redhat.com/errata/RHSA-2026:74459","https://access.redhat.com/errata/RHSA-2026:74460","https://access.redhat.com/errata/RHSA-2026:74461","https://access.redhat.com/errata/RHSA-2026:74462","https://access.redhat.com/errata/RHSA-2026:74463","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/errata/RHSA-2026:82061","https://access.redhat.com/errata/RHSA-2026:82304","https://access.redhat.com/errata/RHSA-2026:82322","https://access.redhat.com/errata/RHSA-2026:82336","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82371","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:82888","https://access.redhat.com/security/cve/CVE-2026-14164","https://bugzilla.redhat.com/show_bug.cgi?id=2493411","https://github.com/libarchive/libarchive/issues/3069","https://github.com/libarchive/libarchive/pull/3071"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-14164","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-06-30T12:20:53.891666Z"}}}],"references":[{"url":"https://github.com/libarchive/libarchive/issues/3069","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-06-30T12:22:17.042Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T19:24:49.682Z"}}},"related_cves":[{"value":"CVE-2026-14164","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23066,"advisory_id":"7b6c4c06-fc69-4de8-ae1d-075767f95bee","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-13757","source_published_at":"2026-06-29T18:44:24.583+00:00","published_at":"2026-10-25T06:12:42.004319+00:00","extraction_method":"structured","technologies":["cert-manager-support-for-red-hat-openshift-release-1-17","cert-manager-support-for-red-hat-openshift-release-1-18","cert-manager-support-for-red-hat-openshift-release-1-20","core-cve","cost-management-4","red-hat-discovery-2","red-hat-enterprise-linux-10","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9","red-hat-hardened-images","red-hat-insights-proxy-1-5","red-hat-openshift-container-platform-4","red-hat-update-infrastructure-5"],"cve_ids":["CVE-2026-13757"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing","summary":"A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive call chain with no recursion depth limit when processing nested CKA_WRAP_TEMPLATE, CKA_UNWRAP_TEMPLATE, and CKA_DERIVE_TEMPLATE attributes. An unauthenticated attacker with local access to the p11-kit RPC Unix domain socket can send a specially crafted request with deeply nested template attributes, causing stack exhaustion and crashing the p11-kit server process and its dependent services.","evidence":"cve:CVE-2026-13757","products":[{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cost Management 4","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Insights proxy 1.5","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/31/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/32/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/33/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/34/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/35/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/36/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/37/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/38/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/39/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-13757","aliases":["CVE-2026-13757"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.2,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:0.26.4-1.el10_2","lessThan":"*","versionType":"rpm"}],"packageName":"p11-kit","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:0.26.4-1.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"p11-kit","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:0.26.4-1.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"p11-kit","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371080","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371069","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791788287","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791378395","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791970484","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459707","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459711","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459759","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1789029076","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791966259","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790223279","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790223719","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790272426","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790589998","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790589912","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790589914","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790589855","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790598593","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-trust-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cost_management:4::el9"],"vendor":"Red Hat","product":"Cost Management 4","versions":[{"status":"unaffected","version":"1790844333","lessThan":"*","versionType":"rpm"}],"packageName":"costmanagement/costmanagement-metrics-rhel9-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1786638573","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-server-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1786634825","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-ui-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"0.26.2-1.2.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"p11-kit-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"0.26.4-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"p11-kit-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:insights_proxy:1.5::el9"],"vendor":"Red Hat","product":"Red Hat Insights proxy 1.5","versions":[{"status":"unaffected","version":"1786433656","lessThan":"*","versionType":"rpm"}],"packageName":"insights-proxy/insights-proxy-container-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1786435241","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-kubernetes-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1786533457","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1786533449","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/haproxy-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1786435483","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1786533529","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241211","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-kubernetes-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787135742","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241260","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"p11-kit","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"p11-kit","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"p11-kit","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-14T19:24:48.694Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:37469","https://access.redhat.com/errata/RHSA-2026:38342","https://access.redhat.com/errata/RHSA-2026:49667","https://access.redhat.com/errata/RHSA-2026:49668","https://access.redhat.com/errata/RHSA-2026:53371","https://access.redhat.com/errata/RHSA-2026:54387","https://access.redhat.com/errata/RHSA-2026:54760","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:72394","https://access.redhat.com/errata/RHSA-2026:72395","https://access.redhat.com/errata/RHSA-2026:72399","https://access.redhat.com/errata/RHSA-2026:72470","https://access.redhat.com/errata/RHSA-2026:72475","https://access.redhat.com/errata/RHSA-2026:72476","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:81201","https://access.redhat.com/errata/RHSA-2026:82304","https://access.redhat.com/errata/RHSA-2026:82322","https://access.redhat.com/errata/RHSA-2026:82336","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:82888","https://access.redhat.com/security/cve/CVE-2026-13757","https://bugzilla.redhat.com/show_bug.cgi?id=2494556","https://github.com/advisories/GHSA-p2wm-69qx-x25w"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-13757","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-07-01T14:21:14.619672Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-01T14:21:43.532Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T19:24:48.694Z"}}},"related_cves":[{"value":"CVE-2026-13757","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23062,"advisory_id":"299bf89b-0876-4e1b-a389-ec53566de04e","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-5278","source_published_at":"2025-05-27T20:52:58.545+00:00","published_at":"2026-10-25T06:12:39.736635+00:00","extraction_method":"structured","technologies":["cert-manager-support-for-red-hat-openshift-release-1-17","cert-manager-support-for-red-hat-openshift-release-1-18","cert-manager-support-for-red-hat-openshift-release-1-20","core-cve","cost-management-4","red-hat-discovery-2","red-hat-enterprise-linux-10","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9","red-hat-insights-proxy-1-5","red-hat-openshift-container-platform-4","red-hat-openshift-distributed-tracing-3-10-2","red-hat-update-infrastructure-5"],"cve_ids":["CVE-2025-5278"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Coreutils: heap buffer under-read in gnu coreutils sort via key specification","summary":"A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.","evidence":"cve:CVE-2025-5278","products":[{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cost Management 4","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Insights proxy 1.5","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.10.2","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.10.2","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.10.2","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.10.2","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.10.2","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.10.2","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.10.2","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.10.2","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift distributed tracing 3.10.2","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/31/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/32/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/33/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/34/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/35/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/36/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/37/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/38/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2025-5278","aliases":["CVE-2025-5278"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.4,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"LOW"}}],"affected":[{"versions":[{"status":"affected","version":"7.2","lessThan":"9.8","versionType":"semver"}],"packageName":"coreutils","collectionURL":"https://cgit.git.savannah.gnu.org/cgit/coreutils.git/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:9.5-8.el10_2","lessThan":"*","versionType":"rpm"}],"packageName":"coreutils","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:8.30-21.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"coreutils","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:8.32-41.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"coreutils","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371080","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371069","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791788287","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791970484","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459707","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459711","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459759","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1789029076","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791966259","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790598593","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-trust-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cost_management:4::el9"],"vendor":"Red Hat","product":"Cost Management 4","versions":[{"status":"unaffected","version":"1783539156","lessThan":"*","versionType":"rpm"}],"packageName":"costmanagement/costmanagement-metrics-rhel9-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1782756541","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-ui-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1784821670","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-server-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:insights_proxy:1.5::el9"],"vendor":"Red Hat","product":"Red Hat Insights proxy 1.5","versions":[{"status":"unaffected","version":"1782890503","lessThan":"*","versionType":"rpm"}],"packageName":"insights-proxy/insights-proxy-container-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.10.2","versions":[{"status":"unaffected","version":"1782501180","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/tempo-gateway-opa-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.10.2","versions":[{"status":"unaffected","version":"1782501200","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/tempo-gateway-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.10.2","versions":[{"status":"unaffected","version":"1782498923","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/tempo-jaeger-query-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.10.2","versions":[{"status":"unaffected","version":"1782510941","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/tempo-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.10.2","versions":[{"status":"unaffected","version":"1782501220","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/tempo-query-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.10.2","versions":[{"status":"unaffected","version":"1782501196","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/tempo-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.10.2","versions":[{"status":"unaffected","version":"1782501195","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/tempo-rhel9-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.10.2","versions":[{"status":"unaffected","version":"1785704636","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/opentelemetry-collector-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift distributed tracing 3.10.2","versions":[{"status":"unaffected","version":"1785704547","lessThan":"*","versionType":"rpm"}],"packageName":"rhosdt/opentelemetry-rhel9-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1784794818","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-kubernetes-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1784794778","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1784795112","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/haproxy-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1784794289","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1784795076","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241211","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-kubernetes-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787135742","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241260","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"coreutils","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"coreutils","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-14T19:23:53.947Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:28911","https://access.redhat.com/errata/RHSA-2026:33124","https://access.redhat.com/errata/RHSA-2026:33313","https://access.redhat.com/errata/RHSA-2026:33612","https://access.redhat.com/errata/RHSA-2026:34102","https://access.redhat.com/errata/RHSA-2026:39981","https://access.redhat.com/errata/RHSA-2026:44481","https://access.redhat.com/errata/RHSA-2026:46836","https://access.redhat.com/errata/RHSA-2026:50205","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:69964","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:82304","https://access.redhat.com/errata/RHSA-2026:82322","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:82888","https://access.redhat.com/security/cve/CVE-2025-5278","https://bugzilla.redhat.com/show_bug.cgi?id=2368764","https://cgit.git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8c9602e3a145e9596dc1a63c6ed67865814b6633","https://debbugs.gnu.org/cgi/bugreport.cgi?bug=78507"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.openwall.com/lists/oss-security/2025/05/27/2"},{"url":"http://www.openwall.com/lists/oss-security/2025/05/29/1"},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-5278"},{"url":"https://cgit.git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8c9602e3a145e9596dc1a63c6ed67865814b6633"},{"url":"https://cgit.git.savannah.gnu.org/cgit/coreutils.git/tree/NEWS?id=8c9602e3a145e9596dc1a63c6ed67865814b6633#n14"},{"url":"http://www.openwall.com/lists/oss-security/2025/05/29/2"}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2025-05-29T18:03:55.440Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2025-5278","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-05-28T13:46:35.101788Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-05-28T13:48:21.860Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T19:23:53.947Z"}}},"related_cves":[{"value":"CVE-2025-5278","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23061,"advisory_id":"7c0aad42-2f59-4fed-b6df-91b9072a7865","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-14831","source_published_at":"2026-02-09T14:51:32.447+00:00","published_at":"2026-10-25T06:12:39.127739+00:00","extraction_method":"structured","technologies":["cert-manager-support-for-red-hat-openshift-release-1-18","core-cve","red-hat-ai-inference-server-3-2","red-hat-ai-inference-server-3-3","red-hat-ceph-storage-8","red-hat-discovery-2","red-hat-enterprise-linux-10","red-hat-enterprise-linux-10-0-extended-update-support","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-8-4-advanced-mission-critical-update-support","red-hat-enterprise-linux-8-4-extended-update-support-long-life-add-on","red-hat-enterprise-linux-8-6-advanced-mission-critical-update-support","red-hat-enterprise-linux-8-6-extended-update-support-long-life-add-on","red-hat-enterprise-linux-8-8-telecommunications-update-service","red-hat-enterprise-linux-8-8-update-services-for-sap-solutions","red-hat-enterprise-linux-9","red-hat-enterprise-linux-9-2-update-services-for-sap-solutions","red-hat-enterprise-linux-9-4-extended-update-support","red-hat-enterprise-linux-9-6-extended-update-support","red-hat-hardened-images","red-hat-insights-proxy-1-5","red-hat-openshift-container-platform-4","red-hat-update-infrastructure-5","rhel-8-based-middleware-containers"],"cve_ids":["CVE-2025-14831"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification","summary":"A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).","evidence":"cve:CVE-2025-14831","products":[{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10.0 Extended Update Support","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.4 Extended Update Support","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.6 Extended Update Support","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/31/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/32/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/33/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AI Inference Server 3.2","evidence":"/containers/cna/affected/34/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AI Inference Server 3.2","evidence":"/containers/cna/affected/35/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AI Inference Server 3.3","evidence":"/containers/cna/affected/36/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AI Inference Server 3.3","evidence":"/containers/cna/affected/37/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AI Inference Server 3.3","evidence":"/containers/cna/affected/38/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AI Inference Server 3.3","evidence":"/containers/cna/affected/39/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AI Inference Server 3.3","evidence":"/containers/cna/affected/40/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AI Inference Server 3.3","evidence":"/containers/cna/affected/41/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ceph Storage 8","evidence":"/containers/cna/affected/42/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/43/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/44/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/45/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Insights proxy 1.5","evidence":"/containers/cna/affected/46/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/47/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/48/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/49/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/50/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/51/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/52/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/53/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/54/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2025-14831","aliases":["CVE-2025-14831"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"versions":[{"status":"affected","version":"0"}],"packageName":"gnutls","collectionURL":"https://gitlab.com/gnutls/gnutls"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:3.8.10-3.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.8.9-9.el10_0.17","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:3.6.16-8.el8_10.5","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:3.6.16-8.el8_10.5","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:3.6.14-10.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:4.13-3.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:3.6.14-10.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:4.13-3.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:3.6.16-5.el8_6.5","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:4.13-3.el8_6.2","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:3.6.16-5.el8_6.5","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:4.13-3.el8_6.2","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:3.6.16-7.el8_8.4","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:4.13-4.el8_8.1","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.6.16-7.el8_8.4","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:4.13-4.el8_8.1","lessThan":"*","versionType":"rpm"}],"packageName":"libtasn1","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.8.3-10.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.8.3-10.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.2::appstream","cpe:/o:redhat:rhel_e4s:9.2::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.7.6-21.el9_2.5","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.4::appstream","cpe:/o:redhat:rhel_eus:9.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.8.3-4.el9_4.5","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6::appstream","cpe:/o:redhat:rhel_eus:9.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.8.3-6.el9_6.3","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-4.1777325677","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-businesscentral-monitoring-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-4.1777325711","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-businesscentral-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-4.1777325710","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-controller-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-3.1777325680","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-dashbuilder-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-4.1777325709","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-kieserver-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-4.1777325680","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-process-migration-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.13.5-4.1777325708","lessThan":"*","versionType":"rpm"}],"packageName":"rhpam-7/rhpam-smartrouter-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459707","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459711","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459759","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1789029076","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791966259","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.2::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.2","versions":[{"status":"unaffected","version":"1780681984","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/model-opt-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.2::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.2","versions":[{"status":"unaffected","version":"1775740563","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/vllm-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.3::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.3","versions":[{"status":"unaffected","version":"1778244559","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/model-opt-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.3::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.3","versions":[{"status":"unaffected","version":"1778244531","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/vllm-rocm-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.3::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.3","versions":[{"status":"unaffected","version":"1778244546","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/vllm-spyre-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.3::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.3","versions":[{"status":"unaffected","version":"1775680192","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/vllm-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.3::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.3","versions":[{"status":"unaffected","version":"1775680262","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/vllm-rocm-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.3::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.3","versions":[{"status":"unaffected","version":"1775749857","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/model-opt-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ceph_storage:8::el9"],"vendor":"Red Hat","product":"Red Hat Ceph Storage 8","versions":[{"status":"unaffected","version":"1774002867","lessThan":"*","versionType":"rpm"}],"packageName":"rhceph/rhceph-8-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1775668717","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-server-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1775675922","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-ui-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"3.8.12-1.1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"gnutls-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:insights_proxy:1.5::el9"],"vendor":"Red Hat","product":"Red Hat Insights proxy 1.5","versions":[{"status":"unaffected","version":"1773685509","lessThan":"*","versionType":"rpm"}],"packageName":"insights-proxy/insights-proxy-container-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1773670073","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1773672059","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/haproxy-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1773668803","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1773670137","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"gnutls","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-14T19:31:33.894Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:13812","https://access.redhat.com/errata/RHSA-2026:16008","https://access.redhat.com/errata/RHSA-2026:16009","https://access.redhat.com/errata/RHSA-2026:16174","https://access.redhat.com/errata/RHSA-2026:25096","https://access.redhat.com/errata/RHSA-2026:30849","https://access.redhat.com/errata/RHSA-2026:30850","https://access.redhat.com/errata/RHSA-2026:33125","https://access.redhat.com/errata/RHSA-2026:3477","https://access.redhat.com/errata/RHSA-2026:4188","https://access.redhat.com/errata/RHSA-2026:4655","https://access.redhat.com/errata/RHSA-2026:4943","https://access.redhat.com/errata/RHSA-2026:5585","https://access.redhat.com/errata/RHSA-2026:5606","https://access.redhat.com/errata/RHSA-2026:6618","https://access.redhat.com/errata/RHSA-2026:6630","https://access.redhat.com/errata/RHSA-2026:6737","https://access.redhat.com/errata/RHSA-2026:6738","https://access.redhat.com/errata/RHSA-2026:7329","https://access.redhat.com/errata/RHSA-2026:7335","https://access.redhat.com/errata/RHSA-2026:7477","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:8746","https://access.redhat.com/errata/RHSA-2026:8747","https://access.redhat.com/errata/RHSA-2026:8748","https://access.redhat.com/security/cve/CVE-2025-14831","https://bugzilla.redhat.com/show_bug.cgi?id=2423177","https://gitlab.com/gnutls/gnutls/-/issues/1773"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2025-14831","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-02-09T15:25:49.680881Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-02-09T15:26:01.239Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC CN 4100","versions":[{"status":"affected","version":"0","lessThan":"V5.0","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-032379.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-05-12T12:02:57.683Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T19:31:33.894Z"}}},"related_cves":[{"value":"CVE-2025-14831","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23060,"advisory_id":"a8ecaa63-b8ad-4318-b0eb-ac1b10ce8c31","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-14512","source_published_at":"2025-12-11T07:11:02.182+00:00","published_at":"2026-10-25T06:12:38.406238+00:00","extraction_method":"structured","technologies":["cert-manager-support-for-red-hat-openshift-release-1-17","cert-manager-support-for-red-hat-openshift-release-1-18","cert-manager-support-for-red-hat-openshift-release-1-20","core-cve","glib","red-hat-ai-inference-server-3-2","red-hat-discovery-2","red-hat-enterprise-linux-10","red-hat-enterprise-linux-10-0-extended-update-support","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-8-4-advanced-mission-critical-update-support","red-hat-enterprise-linux-8-4-extended-update-support-long-life-add-on","red-hat-enterprise-linux-8-6-advanced-mission-critical-update-support","red-hat-enterprise-linux-8-6-telecommunications-update-service","red-hat-enterprise-linux-8-6-update-services-for-sap-solutions","red-hat-enterprise-linux-8-8-telecommunications-update-service","red-hat-enterprise-linux-8-8-update-services-for-sap-solutions","red-hat-enterprise-linux-9","red-hat-enterprise-linux-9-0-update-services-for-sap-solutions","red-hat-enterprise-linux-9-2-update-services-for-sap-solutions","red-hat-enterprise-linux-9-4-extended-update-support","red-hat-enterprise-linux-9-6-extended-update-support","red-hat-hardened-images","red-hat-insights-proxy-1-5","red-hat-openshift-ai-3-4","red-hat-openshift-container-platform-4","red-hat-update-infrastructure-5"],"cve_ids":["CVE-2025-14512"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow","summary":"A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib Input/Output) escape_byte_string() function when processing malicious file or remote filesystem attribute values.","evidence":"cve:CVE-2025-14512","products":[{"name":{"value":"glib","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10.0 Extended Update Support","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Telecommunications Update Service","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.4 Extended Update Support","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.6 Extended Update Support","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AI Inference Server 3.2","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/31/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/32/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/33/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Insights proxy 1.5","evidence":"/containers/cna/affected/34/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/35/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/36/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/37/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/38/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/39/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/40/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/41/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/42/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/43/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/44/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/45/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/46/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/47/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/48/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/49/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/50/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2025-14512","aliases":["CVE-2025-14512"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"GNOME","product":"glib","versions":[{"status":"affected","version":"0","lessThan":"2.86.3","versionType":"semver"}],"packageName":"glib","collectionURL":"https://gitlab.gnome.org/GNOME/glib","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:2.80.4-10.el10_1.13","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:2.80.4-12.el10_2.13","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:2.80.4-4.el10_0.9","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::crb","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:2.56.4-169.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:2.56.4-10.el8_4.5","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:2.56.4-10.el8_4.5","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_e4s:8.6::baseos","cpe:/o:redhat:rhel_tus:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:2.56.4-158.el8_6.5","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_e4s:8.6::baseos","cpe:/o:redhat:rhel_tus:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:2.56.4-158.el8_6.5","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_e4s:8.6::baseos","cpe:/o:redhat:rhel_tus:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:2.56.4-158.el8_6.5","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:2.56.4-165.el8_8","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:2.56.4-165.el8_8","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:2.68.4-18.el9_7.2","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:2.68.4-19.el9_8.1","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:2.68.4-18.el9_7.2","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:2.68.4-19.el9_8.1","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.0::appstream","cpe:/o:redhat:rhel_e4s:9.0::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:2.68.4-5.el9_0.5","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.2::appstream","cpe:/o:redhat:rhel_e4s:9.2::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:2.68.4-7.el9_2.5","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.4::appstream","cpe:/a:redhat:rhel_eus:9.4::crb","cpe:/o:redhat:rhel_eus:9.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Extended Update Support","versions":[{"status":"unaffected","version":"0:2.68.4-14.el9_4.6","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6::appstream","cpe:/a:redhat:rhel_eus:9.6::crb","cpe:/o:redhat:rhel_eus:9.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:2.68.4-16.el9_6.5","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371080","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371069","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791788287","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791970484","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459707","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459711","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459759","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1789029076","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791966259","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790598593","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-trust-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.2::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.2","versions":[{"status":"unaffected","version":"1780681984","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/model-opt-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1782159791","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-server-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1782166952","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-ui-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"2.88.0-1.1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"glib2-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:insights_proxy:1.5::el9"],"vendor":"Red Hat","product":"Red Hat Insights proxy 1.5","versions":[{"status":"unaffected","version":"1780420428","lessThan":"*","versionType":"rpm"}],"packageName":"insights-proxy/insights-proxy-container-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1790703542","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-neuron-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1779798159","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1779798164","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/haproxy-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1779798165","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1779798222","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241211","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-kubernetes-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787135742","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241260","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","packageName":"mingw-glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"mingw-glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"mingw-glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/ose-hypershift-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-14T19:23:56.008Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:15953","https://access.redhat.com/errata/RHSA-2026:15969","https://access.redhat.com/errata/RHSA-2026:15971","https://access.redhat.com/errata/RHSA-2026:19148","https://access.redhat.com/errata/RHSA-2026:19361","https://access.redhat.com/errata/RHSA-2026:19452","https://access.redhat.com/errata/RHSA-2026:19457","https://access.redhat.com/errata/RHSA-2026:19459","https://access.redhat.com/errata/RHSA-2026:19460","https://access.redhat.com/errata/RHSA-2026:19523","https://access.redhat.com/errata/RHSA-2026:19524","https://access.redhat.com/errata/RHSA-2026:19565","https://access.redhat.com/errata/RHSA-2026:19567","https://access.redhat.com/errata/RHSA-2026:21275","https://access.redhat.com/errata/RHSA-2026:22634","https://access.redhat.com/errata/RHSA-2026:25096","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:7461","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/errata/RHSA-2026:82304","https://access.redhat.com/errata/RHSA-2026:82322","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:82888","https://access.redhat.com/security/cve/CVE-2025-14512","https://bugzilla.redhat.com/show_bug.cgi?id=2421339","https://gitlab.gnome.org/GNOME/glib/-/issues/3845"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2025-14512","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-12-11T14:54:52.039681Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-01-06T14:45:25.859Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T19:23:56.008Z"}}},"related_cves":[{"value":"CVE-2025-14512","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23059,"advisory_id":"e2bcff46-f6a2-4cbd-b6c6-b6167287b2bb","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-14104","source_published_at":"2025-12-05T16:22:09.283+00:00","published_at":"2026-10-25T06:12:37.741739+00:00","extraction_method":"structured","technologies":["cert-manager-support-for-red-hat-openshift-release-1-18","core-cve","red-hat-ceph-storage-7","red-hat-ceph-storage-8","red-hat-ceph-storage-9","red-hat-enterprise-linux-10","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9","red-hat-hardened-images","red-hat-insights-proxy-1-5","red-hat-openshift-container-platform-4","red-hat-update-infrastructure-5","util-linux"],"cve_ids":["CVE-2025-14104"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames","summary":"A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.","evidence":"cve:CVE-2025-14104","products":[{"name":{"value":"util-linux","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ceph Storage 7","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ceph Storage 8","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ceph Storage 9","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Insights proxy 1.5","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2025-14104","aliases":["CVE-2025-14104"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.1,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"LOW"}}],"affected":[{"vendor":"util-linux","product":"util-linux","versions":[{"status":"affected","version":"0","lessThan":"2.41.3","versionType":"semver"}],"packageName":"util-linux","collectionURL":"https://github.com/util-linux/util-linux","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:2.40.2-15.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"util-linux","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/a:redhat:enterprise_linux:8::crb","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:2.32.1-48.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"util-linux","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/a:redhat:enterprise_linux:8::crb","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:2.32.1-48.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"util-linux","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:2.37.4-21.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"util-linux","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:2.37.4-21.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"util-linux","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459707","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459711","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459759","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1789029076","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791966259","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ceph_storage:7::el9"],"vendor":"Red Hat","product":"Red Hat Ceph Storage 7","versions":[{"status":"unaffected","version":"1770632724","lessThan":"*","versionType":"rpm"}],"packageName":"rhceph/rhceph-7-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ceph_storage:8::el9"],"vendor":"Red Hat","product":"Red Hat Ceph Storage 8","versions":[{"status":"unaffected","version":"1770630907","lessThan":"*","versionType":"rpm"}],"packageName":"rhceph/rhceph-8-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ceph_storage:9::el10"],"vendor":"Red Hat","product":"Red Hat Ceph Storage 9","versions":[{"status":"unaffected","version":"1771816028","lessThan":"*","versionType":"rpm"}],"packageName":"rhceph/rhceph-9-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"2.42-7.1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"util-linux-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:insights_proxy:1.5::el9"],"vendor":"Red Hat","product":"Red Hat Insights proxy 1.5","versions":[{"status":"unaffected","version":"1770740405","lessThan":"*","versionType":"rpm"}],"packageName":"insights-proxy/insights-proxy-container-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1770646925","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1773670073","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1773672059","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/haproxy-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1773670137","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"util-linux-ng","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"util-linux","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-14T19:31:48.792Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:1696","https://access.redhat.com/errata/RHSA-2026:1852","https://access.redhat.com/errata/RHSA-2026:1913","https://access.redhat.com/errata/RHSA-2026:2485","https://access.redhat.com/errata/RHSA-2026:2563","https://access.redhat.com/errata/RHSA-2026:2737","https://access.redhat.com/errata/RHSA-2026:2800","https://access.redhat.com/errata/RHSA-2026:3406","https://access.redhat.com/errata/RHSA-2026:4943","https://access.redhat.com/errata/RHSA-2026:7180","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/security/cve/CVE-2025-14104","https://bugzilla.redhat.com/show_bug.cgi?id=2419369"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2025-14104","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-12-05T20:03:09.994553Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-12-05T20:03:19.733Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T19:31:48.792Z"}}},"related_cves":[{"value":"CVE-2025-14104","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23058,"advisory_id":"fe88adf1-9dcf-49f6-b865-edeb2adb08b2","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-14087","source_published_at":"2025-12-10T09:01:34.084+00:00","published_at":"2026-10-25T06:12:36.88919+00:00","extraction_method":"structured","technologies":["cert-manager-support-for-red-hat-openshift-release-1-17","cert-manager-support-for-red-hat-openshift-release-1-18","cert-manager-support-for-red-hat-openshift-release-1-20","core-cve","glib","red-hat-ai-inference-server-3-2","red-hat-discovery-2","red-hat-enterprise-linux-10","red-hat-enterprise-linux-10-0-extended-update-support","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7-extended-lifecycle-support","red-hat-enterprise-linux-8","red-hat-enterprise-linux-8-4-advanced-mission-critical-update-support","red-hat-enterprise-linux-8-4-extended-update-support-long-life-add-on","red-hat-enterprise-linux-8-6-advanced-mission-critical-update-support","red-hat-enterprise-linux-8-6-telecommunications-update-service","red-hat-enterprise-linux-8-6-update-services-for-sap-solutions","red-hat-enterprise-linux-8-8-telecommunications-update-service","red-hat-enterprise-linux-8-8-update-services-for-sap-solutions","red-hat-enterprise-linux-9","red-hat-enterprise-linux-9-0-update-services-for-sap-solutions","red-hat-enterprise-linux-9-2-update-services-for-sap-solutions","red-hat-enterprise-linux-9-4-extended-update-support","red-hat-enterprise-linux-9-6-extended-update-support","red-hat-hardened-images","red-hat-insights-proxy-1-5","red-hat-openshift-ai-3-4","red-hat-openshift-container-platform-4","red-hat-update-infrastructure-5"],"cve_ids":["CVE-2025-14087"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Glib: glib: buffer underflow in gvariant parser leads to heap corruption","summary":"A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings.","evidence":"cve:CVE-2025-14087","products":[{"name":{"value":"glib","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10.0 Extended Update Support","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Telecommunications Update Service","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.4 Extended Update Support","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.6 Extended Update Support","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/31/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AI Inference Server 3.2","evidence":"/containers/cna/affected/32/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/33/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/34/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/35/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Insights proxy 1.5","evidence":"/containers/cna/affected/36/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/37/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/38/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/39/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/40/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/41/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/42/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/43/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/44/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/45/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/46/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/47/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/48/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/49/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/50/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/51/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/52/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/53/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/54/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/55/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/56/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2025-14087","aliases":["CVE-2025-14087"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.6,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"LOW"}}],"affected":[{"vendor":"GNOME","product":"glib","versions":[{"status":"affected","version":"0","lessThan":"2.86.3","versionType":"semver"}],"packageName":"glib","collectionURL":"https://gitlab.gnome.org/GNOME/glib","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:2.80.4-10.el10_1.13","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:2.80.4-12.el10_2.13","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:2.80.4-4.el10_0.9","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_els:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","versions":[{"status":"unaffected","version":"0:2.56.1-12.el7_9","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::crb"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:2.70.1-9.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"mingw-glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::crb","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:2.56.4-169.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:2.56.4-10.el8_4.5","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:2.56.4-10.el8_4.5","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_e4s:8.6::baseos","cpe:/o:redhat:rhel_tus:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:2.56.4-158.el8_6.5","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_e4s:8.6::baseos","cpe:/o:redhat:rhel_tus:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:2.56.4-158.el8_6.5","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_e4s:8.6::baseos","cpe:/o:redhat:rhel_tus:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:2.56.4-158.el8_6.5","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:2.56.4-165.el8_8","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:2.56.4-165.el8_8","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:2.68.4-18.el9_7.2","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:2.68.4-19.el9_8.1","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:2.68.4-18.el9_7.2","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:2.68.4-19.el9_8.1","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.0::appstream","cpe:/o:redhat:rhel_e4s:9.0::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:2.68.4-5.el9_0.5","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.2::appstream","cpe:/o:redhat:rhel_e4s:9.2::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:2.68.4-7.el9_2.5","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.4::appstream","cpe:/a:redhat:rhel_eus:9.4::crb","cpe:/o:redhat:rhel_eus:9.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Extended Update Support","versions":[{"status":"unaffected","version":"0:2.68.4-14.el9_4.6","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6::appstream","cpe:/a:redhat:rhel_eus:9.6::crb","cpe:/o:redhat:rhel_eus:9.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:2.68.4-16.el9_6.5","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371080","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371069","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791788287","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791970484","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459707","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459711","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459759","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1789029076","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791966259","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790598593","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-trust-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.2::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.2","versions":[{"status":"unaffected","version":"1780681984","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/model-opt-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1782159791","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-server-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1782166952","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-ui-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"2.88.0-1.1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"glib2-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:insights_proxy:1.5::el9"],"vendor":"Red Hat","product":"Red Hat Insights proxy 1.5","versions":[{"status":"unaffected","version":"1780420428","lessThan":"*","versionType":"rpm"}],"packageName":"insights-proxy/insights-proxy-container-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1790703542","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-neuron-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1779798159","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1779798164","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/haproxy-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1779798165","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1779798222","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241211","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-kubernetes-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787135742","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241260","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","packageName":"bootc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","packageName":"glycin-loaders","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","packageName":"loupe","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","packageName":"mingw-glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","packageName":"papers","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","packageName":"rpm-ostree","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"librsvg2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"bootc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"librsvg2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"mingw-glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/ose-hypershift-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"}],"modified":"2026-10-14T19:23:54.409Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:15953","https://access.redhat.com/errata/RHSA-2026:15969","https://access.redhat.com/errata/RHSA-2026:15971","https://access.redhat.com/errata/RHSA-2026:19148","https://access.redhat.com/errata/RHSA-2026:19361","https://access.redhat.com/errata/RHSA-2026:19452","https://access.redhat.com/errata/RHSA-2026:19457","https://access.redhat.com/errata/RHSA-2026:19459","https://access.redhat.com/errata/RHSA-2026:19460","https://access.redhat.com/errata/RHSA-2026:19523","https://access.redhat.com/errata/RHSA-2026:19524","https://access.redhat.com/errata/RHSA-2026:19565","https://access.redhat.com/errata/RHSA-2026:19566","https://access.redhat.com/errata/RHSA-2026:19567","https://access.redhat.com/errata/RHSA-2026:21275","https://access.redhat.com/errata/RHSA-2026:22634","https://access.redhat.com/errata/RHSA-2026:25096","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:49512","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:7461","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/errata/RHSA-2026:82304","https://access.redhat.com/errata/RHSA-2026:82322","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:82888","https://access.redhat.com/security/cve/CVE-2025-14087","https://bugzilla.redhat.com/show_bug.cgi?id=2419093","https://gitlab.gnome.org/GNOME/glib/-/issues/3834"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2025-14087","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-12-10T14:46:20.422906Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-01-06T14:45:56.385Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T19:23:54.409Z"}}},"related_cves":[{"value":"CVE-2025-14087","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23048,"advisory_id":"883edc07-9a45-4439-bca9-ecb462906724","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-55655","source_published_at":"2026-06-23T03:36:25.724+00:00","published_at":"2026-10-25T06:12:29.715632+00:00","extraction_method":"structured","technologies":["core-cve","red-hat-enterprise-linux-10","red-hat-enterprise-linux-10-0-extended-update-support","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9","red-hat-enterprise-linux-9-4-update-services-for-sap-solutions","red-hat-enterprise-linux-9-6-extended-update-support","red-hat-hardened-images","red-hat-openshift-ai-3-0","red-hat-openshift-ai-3-2","red-hat-openshift-ai-3-3","red-hat-openshift-ai-3-4","red-hat-openshift-ai-3-5","red-hat-openshift-container-platform-4","red-hat-update-infrastructure-5"],"cve_ids":["CVE-2026-55655"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions","summary":"A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX-domain X socket is used. A successful attack can compromise the confidentiality of forwarded X11 traffic, including sensitive window contents and input, and may allow some manipulation of the forwarded session.","evidence":"cve:CVE-2026-55655","products":[{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10.0 Extended Update Support","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.6 Extended Update Support","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.3","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.3","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.3","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.3","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.3","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.3","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.3","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.3","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/31/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/32/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/33/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/34/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/35/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/36/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.5","evidence":"/containers/cna/affected/37/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.5","evidence":"/containers/cna/affected/38/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.5","evidence":"/containers/cna/affected/39/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.5","evidence":"/containers/cna/affected/40/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.5","evidence":"/containers/cna/affected/41/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.5","evidence":"/containers/cna/affected/42/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.5","evidence":"/containers/cna/affected/43/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.5","evidence":"/containers/cna/affected/44/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.5","evidence":"/containers/cna/affected/45/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/46/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/47/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/48/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/49/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/50/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/51/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/52/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/53/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-55655","aliases":["CVE-2026-55655"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:9.9p1-25.el10_2","lessThan":"*","versionType":"rpm"}],"packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:9.9p1-7.el10_0.5","lessThan":"*","versionType":"rpm"}],"packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:8.0p1-30.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:8.0p1-30.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:9.9p1-9.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:9.9p1-9.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.4::appstream","cpe:/o:redhat:rhel_e4s:9.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:8.7p1-38.el9_4.10","lessThan":"*","versionType":"rpm"}],"packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6::appstream","cpe:/o:redhat:rhel_eus:9.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.7p1-45.el9_6.5","lessThan":"*","versionType":"rpm"}],"packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"10.3p1-6.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"openssh-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1791818590","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1791818589","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1791818505","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-spyre-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1791818496","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-tpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1791818502","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1791818602","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-spyre-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1791818598","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1791818512","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-tpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1791818587","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1791818778","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1791818512","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","versions":[{"status":"unaffected","version":"1791818782","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-tpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","versions":[{"status":"unaffected","version":"1791818782","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-6.4-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","versions":[{"status":"unaffected","version":"1791818627","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-12.9-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","versions":[{"status":"unaffected","version":"1791818790","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-7.0-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","versions":[{"status":"unaffected","version":"1791818874","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","versions":[{"status":"unaffected","version":"1791818792","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-neuron-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","versions":[{"status":"unaffected","version":"1791818662","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-13.0-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","versions":[{"status":"unaffected","version":"1791818877","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-spyre-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1791883722","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-neuron-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1791881612","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-12.9-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1791885618","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1791881487","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-6.4-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1791881732","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-spyre-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1791883315","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-7.1-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1791881486","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-gaudi-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1791881769","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-tpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1791885505","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-13.0-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","versions":[{"status":"unaffected","version":"1791819252","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-spyre-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","versions":[{"status":"unaffected","version":"1791818749","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-gaudi-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","versions":[{"status":"unaffected","version":"1791819206","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","versions":[{"status":"unaffected","version":"1791818979","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-neuron-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","versions":[{"status":"unaffected","version":"1791819123","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-7.14-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","versions":[{"status":"unaffected","version":"1791818901","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-tpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","versions":[{"status":"unaffected","version":"1791820333","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rubin-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","versions":[{"status":"unaffected","version":"1791819495","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-13.0-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","versions":[{"status":"unaffected","version":"1791819104","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-12.9-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1786435483","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1786533529","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787135742","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241260","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"}],"modified":"2026-10-14T19:11:14.188Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:36759","https://access.redhat.com/errata/RHSA-2026:47755","https://access.redhat.com/errata/RHSA-2026:47756","https://access.redhat.com/errata/RHSA-2026:47757","https://access.redhat.com/errata/RHSA-2026:54387","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:76748","https://access.redhat.com/errata/RHSA-2026:76993","https://access.redhat.com/errata/RHSA-2026:80513","https://access.redhat.com/errata/RHSA-2026:82749","https://access.redhat.com/errata/RHSA-2026:82750","https://access.redhat.com/errata/RHSA-2026:82751","https://access.redhat.com/errata/RHSA-2026:82752","https://access.redhat.com/errata/RHSA-2026:82753","https://access.redhat.com/errata/RHSA-2026:82754","https://access.redhat.com/errata/RHSA-2026:82755","https://access.redhat.com/errata/RHSA-2026:82756","https://access.redhat.com/errata/RHSA-2026:82757","https://access.redhat.com/errata/RHSA-2026:82758","https://access.redhat.com/errata/RHSA-2026:82759","https://access.redhat.com/errata/RHSA-2026:82761","https://access.redhat.com/errata/RHSA-2026:82762","https://access.redhat.com/errata/RHSA-2026:82763","https://access.redhat.com/errata/RHSA-2026:82897","https://access.redhat.com/errata/RHSA-2026:82898","https://access.redhat.com/errata/RHSA-2026:82899","https://access.redhat.com/errata/RHSA-2026:82900","https://access.redhat.com/errata/RHSA-2026:82901","https://access.redhat.com/errata/RHSA-2026:82902","https://access.redhat.com/errata/RHSA-2026:82903","https://access.redhat.com/errata/RHSA-2026:82904","https://access.redhat.com/errata/RHSA-2026:82907","https://access.redhat.com/errata/RHSA-2026:82908","https://access.redhat.com/errata/RHSA-2026:82909","https://access.redhat.com/errata/RHSA-2026:82910","https://access.redhat.com/errata/RHSA-2026:82912","https://access.redhat.com/errata/RHSA-2026:82913","https://access.redhat.com/errata/RHSA-2026:82914","https://access.redhat.com/errata/RHSA-2026:82915","https://access.redhat.com/errata/RHSA-2026:82916","https://access.redhat.com/errata/RHSA-2026:82917","https://access.redhat.com/errata/RHSA-2026:82918","https://access.redhat.com/errata/RHSA-2026:82920","https://access.redhat.com/errata/RHSA-2026:82921","https://access.redhat.com/errata/RHSA-2026:82922","https://access.redhat.com/errata/RHSA-2026:82923","https://access.redhat.com/security/cve/CVE-2026-55655","https://bugzilla.redhat.com/show_bug.cgi?id=2462250"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-55655","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-06-23T12:21:42.502865Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-06-23T12:21:47.865Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T19:11:14.188Z"}}},"related_cves":[{"value":"CVE-2026-55655","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23047,"advisory_id":"862f6918-9716-49bf-8f3c-ec176b39348d","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-58016","source_published_at":"2026-06-30T13:02:45.931+00:00","published_at":"2026-10-25T06:12:29.131019+00:00","extraction_method":"structured","technologies":["cert-manager-support-for-red-hat-openshift-release-1-17","cert-manager-support-for-red-hat-openshift-release-1-18","cert-manager-support-for-red-hat-openshift-release-1-20","core-cve","glib","red-hat-discovery-2","red-hat-enterprise-linux-10","red-hat-enterprise-linux-10-0-extended-update-support","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7-extended-lifecycle-support","red-hat-enterprise-linux-8","red-hat-enterprise-linux-8-4-advanced-mission-critical-update-support","red-hat-enterprise-linux-8-4-extended-update-support-long-life-add-on","red-hat-enterprise-linux-8-6-advanced-mission-critical-update-support","red-hat-enterprise-linux-8-6-extended-update-support-long-life-add-on","red-hat-enterprise-linux-8-8-telecommunications-update-service","red-hat-enterprise-linux-8-8-update-services-for-sap-solutions","red-hat-enterprise-linux-9","red-hat-enterprise-linux-9-2-update-services-for-sap-solutions","red-hat-enterprise-linux-9-4-update-services-for-sap-solutions","red-hat-enterprise-linux-9-6-extended-update-support","red-hat-hardened-images","red-hat-insights-proxy-1-5","red-hat-openshift-ai-3-0","red-hat-openshift-ai-3-2","red-hat-openshift-ai-3-4","red-hat-update-infrastructure-5"],"cve_ids":["CVE-2026-58016"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Glib: integer underflow in gio/gdbusintrospection.c via \"g_dbus_node_info_new_for_xml\"","summary":"A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a `node` element nested within other elements like `method`, `signal`, `property` or `arg`. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service.","evidence":"cve:CVE-2026-58016","products":[{"name":{"value":"GLib","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10.0 Extended Update Support","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.6 Extended Update Support","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.17","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/31/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/32/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/33/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/34/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/35/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/36/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Insights proxy 1.5","evidence":"/containers/cna/affected/37/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/38/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/39/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/40/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/41/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/42/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/43/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/44/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/45/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/46/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/47/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/48/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/49/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/50/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/51/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/52/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/53/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/54/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/55/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/56/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/57/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/58/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/59/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/60/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/61/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-58016","aliases":["CVE-2026-58016"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"GNOME","product":"GLib","versions":[{"status":"affected","version":"0","lessThan":"2.89.0","versionType":"semver"}],"packageName":"GLib","collectionURL":"https://gitlab.gnome.org/GNOME/glib/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:2.80.4-12.el10_2.14","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:2.80.4-4.el10_0.10","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_els:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","versions":[{"status":"unaffected","version":"0:2.56.1-13.el7_9","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::crb"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:2.70.1-9.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"mingw-glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::crb","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:2.56.4-170.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:2.56.4-10.el8_4.6","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:2.56.4-10.el8_4.6","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:2.56.4-158.el8_6.6","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:2.56.4-158.el8_6.6","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:2.56.4-165.el8_8.1","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:2.56.4-165.el8_8.1","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:2.68.4-19.el9_8.2","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/a:redhat:enterprise_linux:9::crb","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:2.68.4-19.el9_8.2","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.2::appstream","cpe:/o:redhat:rhel_e4s:9.2::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:2.68.4-7.el9_2.6","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.4::appstream","cpe:/o:redhat:rhel_e4s:9.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:2.68.4-14.el9_4.7","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6::appstream","cpe:/a:redhat:rhel_eus:9.6::crb","cpe:/o:redhat:rhel_eus:9.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:2.68.4-16.el9_6.6","lessThan":"*","versionType":"rpm"}],"packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371080","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791371069","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791788287","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791378395","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","versions":[{"status":"unaffected","version":"1791970484","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459707","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459711","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459759","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1789029076","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791966259","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790223279","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790223719","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790272426","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790589998","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790589912","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790589914","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790589855","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790598593","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-trust-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1784821670","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-server-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1784821750","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-ui-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:insights_proxy:1.5::el9"],"vendor":"Red Hat","product":"Red Hat Insights proxy 1.5","versions":[{"status":"unaffected","version":"1786433656","lessThan":"*","versionType":"rpm"}],"packageName":"insights-proxy/insights-proxy-container-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1790276886","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1790276884","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-tpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1790277045","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1790276889","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-spyre-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1790276974","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1790703497","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-tpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1790703506","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1790703590","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1790703568","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-spyre-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1790703586","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1790703494","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1790703542","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-neuron-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1784794818","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-kubernetes-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1784794778","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1784795112","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/haproxy-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1784794289","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1784795076","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241211","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-kubernetes-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787135742","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241260","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","packageName":"mingw-glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"mingw-glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"}],"modified":"2026-10-14T19:10:38.064Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:42063","https://access.redhat.com/errata/RHSA-2026:42089","https://access.redhat.com/errata/RHSA-2026:42090","https://access.redhat.com/errata/RHSA-2026:44481","https://access.redhat.com/errata/RHSA-2026:46836","https://access.redhat.com/errata/RHSA-2026:49512","https://access.redhat.com/errata/RHSA-2026:51175","https://access.redhat.com/errata/RHSA-2026:51176","https://access.redhat.com/errata/RHSA-2026:51177","https://access.redhat.com/errata/RHSA-2026:51181","https://access.redhat.com/errata/RHSA-2026:51182","https://access.redhat.com/errata/RHSA-2026:51183","https://access.redhat.com/errata/RHSA-2026:51184","https://access.redhat.com/errata/RHSA-2026:51185","https://access.redhat.com/errata/RHSA-2026:53371","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:72394","https://access.redhat.com/errata/RHSA-2026:72395","https://access.redhat.com/errata/RHSA-2026:72399","https://access.redhat.com/errata/RHSA-2026:72470","https://access.redhat.com/errata/RHSA-2026:72475","https://access.redhat.com/errata/RHSA-2026:72476","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:73909","https://access.redhat.com/errata/RHSA-2026:73959","https://access.redhat.com/errata/RHSA-2026:73960","https://access.redhat.com/errata/RHSA-2026:73961","https://access.redhat.com/errata/RHSA-2026:73962","https://access.redhat.com/errata/RHSA-2026:74458","https://access.redhat.com/errata/RHSA-2026:74459","https://access.redhat.com/errata/RHSA-2026:74460","https://access.redhat.com/errata/RHSA-2026:74461","https://access.redhat.com/errata/RHSA-2026:74462","https://access.redhat.com/errata/RHSA-2026:74463","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/errata/RHSA-2026:82304","https://access.redhat.com/errata/RHSA-2026:82322","https://access.redhat.com/errata/RHSA-2026:82336","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:82888","https://access.redhat.com/security/cve/CVE-2026-58016","https://bugzilla.redhat.com/show_bug.cgi?id=2492257","https://gitlab.gnome.org/GNOME/glib/-/issues/3932"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-58016","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-06-30T13:54:25.243451Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-06-30T14:01:02.370Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T19:10:38.064Z"}}},"related_cves":[{"value":"CVE-2026-58016","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23046,"advisory_id":"43495b9d-fafb-4fca-aa77-7719af4dedf2","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-55653","source_published_at":"2026-06-23T03:36:22.741+00:00","published_at":"2026-10-25T06:12:28.539604+00:00","extraction_method":"structured","technologies":["core-cve","red-hat-enterprise-linux-10","red-hat-enterprise-linux-10-0-extended-update-support","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9","red-hat-enterprise-linux-9-4-update-services-for-sap-solutions","red-hat-enterprise-linux-9-6-extended-update-support","red-hat-hardened-images","red-hat-openshift-ai-3-0","red-hat-openshift-ai-3-2","red-hat-openshift-ai-3-3","red-hat-openshift-ai-3-4","red-hat-openshift-ai-3-5","red-hat-openshift-container-platform-4","red-hat-update-infrastructure-5"],"cve_ids":["CVE-2026-55653"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service","summary":"A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Federal Information Processing Standards) mode known-group validation when the client processes attacker-controlled DH-GEX group parameters. Successful exploitation leads to client-side process termination, resulting in a Denial of Service (DoS).","evidence":"cve:CVE-2026-55653","products":[{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10.0 Extended Update Support","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.6 Extended Update Support","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.0","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.2","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.3","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.3","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.3","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.3","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.3","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.3","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.3","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.3","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/31/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/32/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/33/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/34/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/35/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/36/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.5","evidence":"/containers/cna/affected/37/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.5","evidence":"/containers/cna/affected/38/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.5","evidence":"/containers/cna/affected/39/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.5","evidence":"/containers/cna/affected/40/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.5","evidence":"/containers/cna/affected/41/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.5","evidence":"/containers/cna/affected/42/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.5","evidence":"/containers/cna/affected/43/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.5","evidence":"/containers/cna/affected/44/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.5","evidence":"/containers/cna/affected/45/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/46/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/47/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/48/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/49/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/50/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/51/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/52/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/53/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-55653","aliases":["CVE-2026-55653"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:9.9p1-25.el10_2","lessThan":"*","versionType":"rpm"}],"packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:9.9p1-7.el10_0.5","lessThan":"*","versionType":"rpm"}],"packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:8.0p1-30.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:8.0p1-30.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:9.9p1-9.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:9.9p1-9.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.4::appstream","cpe:/o:redhat:rhel_e4s:9.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:8.7p1-38.el9_4.10","lessThan":"*","versionType":"rpm"}],"packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6::appstream","cpe:/o:redhat:rhel_eus:9.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.7p1-45.el9_6.5","lessThan":"*","versionType":"rpm"}],"packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"10.3p1-6.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"openssh-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1791818590","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1791818589","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1791818505","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-spyre-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1791818496","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-tpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","versions":[{"status":"unaffected","version":"1791818502","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1791818602","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-spyre-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1791818598","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1791818512","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-tpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1791818587","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1791818778","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","versions":[{"status":"unaffected","version":"1791818512","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","versions":[{"status":"unaffected","version":"1791818782","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-tpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","versions":[{"status":"unaffected","version":"1791818782","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-6.4-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","versions":[{"status":"unaffected","version":"1791818627","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-12.9-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","versions":[{"status":"unaffected","version":"1791818790","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-7.0-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","versions":[{"status":"unaffected","version":"1791818874","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","versions":[{"status":"unaffected","version":"1791818792","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-neuron-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","versions":[{"status":"unaffected","version":"1791818662","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-13.0-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","versions":[{"status":"unaffected","version":"1791818877","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-spyre-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1791883722","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-neuron-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1791881612","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-12.9-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1791885618","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1791881487","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-6.4-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1791881732","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-spyre-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1791883315","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-7.1-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1791881486","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-gaudi-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1791881769","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-tpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1791885505","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-13.0-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","versions":[{"status":"unaffected","version":"1791819252","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-spyre-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","versions":[{"status":"unaffected","version":"1791818749","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-gaudi-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","versions":[{"status":"unaffected","version":"1791819206","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","versions":[{"status":"unaffected","version":"1791818979","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-neuron-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","versions":[{"status":"unaffected","version":"1791819123","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rocm-7.14-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","versions":[{"status":"unaffected","version":"1791818901","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-tpu-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","versions":[{"status":"unaffected","version":"1791820333","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-rubin-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","versions":[{"status":"unaffected","version":"1791819495","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-13.0-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","versions":[{"status":"unaffected","version":"1791819104","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-cuda-12.9-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1786435483","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1786533529","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787135742","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241260","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"openssh","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-14T19:11:11.921Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:36759","https://access.redhat.com/errata/RHSA-2026:47755","https://access.redhat.com/errata/RHSA-2026:47756","https://access.redhat.com/errata/RHSA-2026:47757","https://access.redhat.com/errata/RHSA-2026:54387","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:76748","https://access.redhat.com/errata/RHSA-2026:76993","https://access.redhat.com/errata/RHSA-2026:80513","https://access.redhat.com/errata/RHSA-2026:82749","https://access.redhat.com/errata/RHSA-2026:82750","https://access.redhat.com/errata/RHSA-2026:82751","https://access.redhat.com/errata/RHSA-2026:82752","https://access.redhat.com/errata/RHSA-2026:82753","https://access.redhat.com/errata/RHSA-2026:82754","https://access.redhat.com/errata/RHSA-2026:82755","https://access.redhat.com/errata/RHSA-2026:82756","https://access.redhat.com/errata/RHSA-2026:82757","https://access.redhat.com/errata/RHSA-2026:82758","https://access.redhat.com/errata/RHSA-2026:82759","https://access.redhat.com/errata/RHSA-2026:82761","https://access.redhat.com/errata/RHSA-2026:82762","https://access.redhat.com/errata/RHSA-2026:82763","https://access.redhat.com/errata/RHSA-2026:82897","https://access.redhat.com/errata/RHSA-2026:82898","https://access.redhat.com/errata/RHSA-2026:82899","https://access.redhat.com/errata/RHSA-2026:82900","https://access.redhat.com/errata/RHSA-2026:82901","https://access.redhat.com/errata/RHSA-2026:82902","https://access.redhat.com/errata/RHSA-2026:82903","https://access.redhat.com/errata/RHSA-2026:82904","https://access.redhat.com/errata/RHSA-2026:82907","https://access.redhat.com/errata/RHSA-2026:82908","https://access.redhat.com/errata/RHSA-2026:82909","https://access.redhat.com/errata/RHSA-2026:82910","https://access.redhat.com/errata/RHSA-2026:82912","https://access.redhat.com/errata/RHSA-2026:82913","https://access.redhat.com/errata/RHSA-2026:82914","https://access.redhat.com/errata/RHSA-2026:82915","https://access.redhat.com/errata/RHSA-2026:82916","https://access.redhat.com/errata/RHSA-2026:82917","https://access.redhat.com/errata/RHSA-2026:82918","https://access.redhat.com/errata/RHSA-2026:82920","https://access.redhat.com/errata/RHSA-2026:82921","https://access.redhat.com/errata/RHSA-2026:82922","https://access.redhat.com/errata/RHSA-2026:82923","https://access.redhat.com/security/cve/CVE-2026-55653","https://bugzilla.redhat.com/show_bug.cgi?id=2462351"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-55653","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-06-23T14:30:51.025049Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-06-23T14:31:00.827Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T19:11:11.921Z"}}},"related_cves":[{"value":"CVE-2026-55653","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23045,"advisory_id":"a20da38e-2a9e-49a6-af4b-20462749ea13","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-4111","source_published_at":"2026-03-13T11:45:20.653+00:00","published_at":"2026-10-25T06:12:27.951311+00:00","extraction_method":"structured","technologies":["cert-manager-support-for-red-hat-openshift-release-1-18","core-cve","red-hat-ai-inference-server-3-2","red-hat-ai-inference-server-3-3","red-hat-discovery-2","red-hat-enterprise-linux-10","red-hat-enterprise-linux-10-0-extended-update-support","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9","red-hat-enterprise-linux-9-0-update-services-for-sap-solutions","red-hat-enterprise-linux-9-2-update-services-for-sap-solutions","red-hat-enterprise-linux-9-4-extended-update-support","red-hat-enterprise-linux-9-6-extended-update-support","red-hat-hardened-images","red-hat-insights-proxy-1-5","red-hat-openshift-container-platform-4","red-hat-openshift-container-platform-4-13","red-hat-openshift-container-platform-4-14","red-hat-openshift-container-platform-4-15","red-hat-openshift-container-platform-4-16","red-hat-openshift-container-platform-4-17","red-hat-openshift-container-platform-4-18","red-hat-openshift-container-platform-4-19","red-hat-update-infrastructure-5"],"cve_ids":["CVE-2026-4111"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive","summary":"A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 archive is processed, the decompression routine may enter a state where internal logic prevents forward progress. This condition results in an infinite loop that continuously consumes CPU resources. Because the archive passes checksum validation and appears structurally valid, affected applications cannot detect the issue before processing. This can allow attackers to cause persistent denial-of-service conditions in services that automatically process archives.","evidence":"cve:CVE-2026-4111","products":[{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10.0 Extended Update Support","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.4 Extended Update Support","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.6 Extended Update Support","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.13","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.14","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.15","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.16","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.17","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.18","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.19","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.18","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AI Inference Server 3.2","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AI Inference Server 3.2","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AI Inference Server 3.3","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AI Inference Server 3.3","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AI Inference Server 3.3","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AI Inference Server 3.3","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AI Inference Server 3.3","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AI Inference Server 3.3","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Insights proxy 1.5","evidence":"/containers/cna/affected/31/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/32/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/33/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/34/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/35/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/36/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/37/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/38/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/39/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-4111","aliases":["CVE-2026-4111"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:3.7.7-5.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.7.7-5.el10_0","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.5.3-7.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.5.3-7.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.0::appstream","cpe:/o:redhat:rhel_e4s:9.0::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.5.3-2.el9_0.3","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.2::appstream","cpe:/o:redhat:rhel_e4s:9.2::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.5.3-5.el9_2.1","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.4::appstream","cpe:/a:redhat:rhel_eus:9.4::crb","cpe:/o:redhat:rhel_eus:9.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.5.3-4.el9_4.2","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6::appstream","cpe:/o:redhat:rhel_eus:9.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.5.3-6.el9_6.1","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.13::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.13","versions":[{"status":"unaffected","version":"413.92.202604080111-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.14::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.14","versions":[{"status":"unaffected","version":"414.92.202605060243-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.15::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.15","versions":[{"status":"unaffected","version":"415.92.202605060220-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.16::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.16","versions":[{"status":"unaffected","version":"416.94.202604211449-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.17::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.17","versions":[{"status":"unaffected","version":"417.94.202605112123-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.18::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.18","versions":[{"status":"unaffected","version":"418.94.202604140044-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.19::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.19","versions":[{"status":"unaffected","version":"4.19.9.6.202604211219-0","lessThan":"*","versionType":"rpm"}],"packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459707","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459711","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791459759","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1789029076","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","versions":[{"status":"unaffected","version":"1791966259","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.2::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.2","versions":[{"status":"unaffected","version":"1780681984","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/model-opt-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.2::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.2","versions":[{"status":"unaffected","version":"1775740563","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/vllm-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.3::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.3","versions":[{"status":"unaffected","version":"1778244559","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/model-opt-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.3::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.3","versions":[{"status":"unaffected","version":"1778244531","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/vllm-rocm-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.3::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.3","versions":[{"status":"unaffected","version":"1778244546","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/vllm-spyre-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.3::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.3","versions":[{"status":"unaffected","version":"1775680192","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/vllm-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.3::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.3","versions":[{"status":"unaffected","version":"1775680262","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/vllm-rocm-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.3::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.3","versions":[{"status":"unaffected","version":"1775749857","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/model-opt-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1775668717","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-server-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1775675922","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-ui-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"3.8.7-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:insights_proxy:1.5::el9"],"vendor":"Red Hat","product":"Red Hat Insights proxy 1.5","versions":[{"status":"unaffected","version":"1776868961","lessThan":"*","versionType":"rpm"}],"packageName":"insights-proxy/insights-proxy-container-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1776868774","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1776868744","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/haproxy-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1776868772","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1776868842","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"}],"modified":"2026-10-14T19:10:47.983Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:10065","https://access.redhat.com/errata/RHSA-2026:10081","https://access.redhat.com/errata/RHSA-2026:10097","https://access.redhat.com/errata/RHSA-2026:14773","https://access.redhat.com/errata/RHSA-2026:15087","https://access.redhat.com/errata/RHSA-2026:16008","https://access.redhat.com/errata/RHSA-2026:16009","https://access.redhat.com/errata/RHSA-2026:16174","https://access.redhat.com/errata/RHSA-2026:17596","https://access.redhat.com/errata/RHSA-2026:25096","https://access.redhat.com/errata/RHSA-2026:5063","https://access.redhat.com/errata/RHSA-2026:5080","https://access.redhat.com/errata/RHSA-2026:6647","https://access.redhat.com/errata/RHSA-2026:7093","https://access.redhat.com/errata/RHSA-2026:7105","https://access.redhat.com/errata/RHSA-2026:7106","https://access.redhat.com/errata/RHSA-2026:7239","https://access.redhat.com/errata/RHSA-2026:7329","https://access.redhat.com/errata/RHSA-2026:7335","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:8423","https://access.redhat.com/errata/RHSA-2026:8746","https://access.redhat.com/errata/RHSA-2026:8747","https://access.redhat.com/errata/RHSA-2026:8748","https://access.redhat.com/errata/RHSA-2026:8865","https://access.redhat.com/errata/RHSA-2026:8944","https://access.redhat.com/errata/RHSA-2026:9832","https://access.redhat.com/security/cve/CVE-2026-4111","https://bugzilla.redhat.com/show_bug.cgi?id=2446453","https://github.com/libarchive/libarchive/pull/2877"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-4111","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-03-13T13:36:13.170394Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-03-13T13:36:18.676Z"}},{"title":"libarchive: Infinite Loop Denial of Service in RAR5 Decompression via archive_read_data() in libarchive","metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:3.7.7-5.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.7.7-5.el10_0","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9","cpe:/o:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:3.5.3-7.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.5.3-2.el9_0.3","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.2"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:3.5.3-5.el9_2.1","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.4"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.5.3-4.el9_4.2","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:3.5.3-6.el9_6.1","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.13::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.13","versions":[{"status":"unaffected","version":"413.92.202604080111-0","lessThan":"*","versionType":"rpm"}],"packageName":"rhcos","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.14::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.14","versions":[{"status":"unaffected","version":"414.92.202605060243-0","lessThan":"*","versionType":"rpm"}],"packageName":"rhcos","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.15::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.15","versions":[{"status":"unaffected","version":"415.92.202605060220-0","lessThan":"*","versionType":"rpm"}],"packageName":"rhcos","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.16::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.16","versions":[{"status":"unaffected","version":"416.94.202604211449-0","lessThan":"*","versionType":"rpm"}],"packageName":"rhcos","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.17::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.17","versions":[{"status":"unaffected","version":"417.94.202605112123-0","lessThan":"*","versionType":"rpm"}],"packageName":"rhcos","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.18::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.18","versions":[{"status":"unaffected","version":"418.94.202604140044-0","lessThan":"*","versionType":"rpm"}],"packageName":"rhcos","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.19::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.19","versions":[{"status":"unaffected","version":"4.19.9.6.202604211219-0","lessThan":"*","versionType":"rpm"}],"packageName":"rhcos","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.2::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.2","versions":[{"status":"unaffected","version":"1780681984","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/model-opt-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.2::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.2","versions":[{"status":"unaffected","version":"1775740563","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/vllm-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.3::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.3","versions":[{"status":"unaffected","version":"1775749857","lessThan":"*","versionType":"rpm"},{"status":"unaffected","version":"1778244559","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/model-opt-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.3::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.3","versions":[{"status":"unaffected","version":"1775680262","lessThan":"*","versionType":"rpm"},{"status":"unaffected","version":"1778244531","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/vllm-rocm-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.3::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.3","versions":[{"status":"unaffected","version":"1778244546","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/vllm-spyre-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ai_inference_server:3.3::el9"],"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.3","versions":[{"status":"unaffected","version":"1775680192","lessThan":"*","versionType":"rpm"}],"packageName":"rhaiis/vllm-cuda-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1775668717","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-server-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1775675922","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-ui-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"3.8.7-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"libarchive-main","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:insights_proxy:1.5::el9"],"vendor":"Red Hat","product":"Red Hat Insights proxy 1.5","versions":[{"status":"unaffected","version":"1776868961","lessThan":"*","versionType":"rpm"}],"packageName":"insights-proxy/insights-proxy-container-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1776868774","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1776868744","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/haproxy-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1776868772","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1776868842","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"libarchive","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"}],"timeline":[{"lang":"en","time":"2026-03-11T11:18:51.609Z","value":"Reported to Red Hat."},{"lang":"en","time":"2026-03-11T00:00:00.000Z","value":"Made public."}],"solutions":[{"lang":"en","value":"RHSA-2026:7239: Red Hat OpenShift Container Platform 4.13"},{"lang":"en","value":"RHSA-2026:15087: Red Hat OpenShift Container Platform 4.14"},{"lang":"en","value":"RHSA-2026:14773: Red Hat OpenShift Container Platform 4.15"},{"lang":"en","value":"RHSA-2026:10097: Red Hat OpenShift Container Platform 4.16"},{"lang":"en","value":"RHSA-2026:17596: Red Hat OpenShift Container Platform 4.17"},{"lang":"en","value":"RHSA-2026:8423: Red Hat OpenShift Container Platform 4.18"},{"lang":"en","value":"RHSA-2026:10081: Red Hat OpenShift Container Platform 4.19"},{"lang":"en","value":"RHSA-2026:8865: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux BaseOS EUS (v. 10.0)"},{"lang":"en","value":"RHSA-2026:5063: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10)"},{"lang":"en","value":"RHSA-2026:7093: Red Hat Enterprise Linux AppStream E4S (v.9.0), Red Hat Enterprise Linux BaseOS E4S (v.9.0)"},{"lang":"en","value":"RHSA-2026:6647: Red Hat Enterprise Linux AppStream E4S (v.9.2), Red Hat Enterprise Linux BaseOS E4S (v.9.2)"},{"lang":"en","value":"RHSA-2026:7106: Red Hat CodeReady Linux Builder EUS (v.9.4), Red Hat Enterprise Linux AppStream EUS (v.9.4), Red Hat Enterprise Linux BaseOS EUS (v.9.4)"},{"lang":"en","value":"RHSA-2026:7105: Red Hat Enterprise Linux AppStream EUS (v.9.6), Red Hat Enterprise Linux BaseOS EUS (v.9.6)"},{"lang":"en","value":"RHSA-2026:5080: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9)"},{"lang":"en","value":"RHSA-2026:25096: Red Hat AI Inference Server 3.2"},{"lang":"en","value":"RHSA-2026:7335: Red Hat AI Inference Server 3.2"},{"lang":"en","value":"RHSA-2026:16008: Red Hat AI Inference Server 3.3"},{"lang":"en","value":"RHSA-2026:8748: Red Hat AI Inference Server 3.3"},{"lang":"en","value":"RHSA-2026:8746: Red Hat AI Inference Server 3.3"},{"lang":"en","value":"RHSA-2026:8747: Red Hat AI Inference Server 3.3"},{"lang":"en","value":"RHSA-2026:16009: Red Hat AI Inference Server 3.3"},{"lang":"en","value":"RHSA-2026:16174: Red Hat AI Inference Server 3.3"},{"lang":"en","value":"RHSA-2026:7329: Red Hat Discovery 2"},{"lang":"en","value":"RHSA-2026:8944: Red Hat Hardened Images"},{"lang":"en","value":"RHSA-2026:9832: Red Hat Insights proxy 1.5"},{"lang":"en","value":"RHSA-2026:10065: Red Hat Update Infrastructure 5"}],"x_adpType":"supplier","datePublic":"2026-03-11T00:00:00.000Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-4111","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2446453","name":"RHBZ#2446453","tags":["issue-tracking","x_refsource_REDHAT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4111.json","tags":["x_sadp-csaf-vex"]},{"url":"https://access.redhat.com/errata/RHSA-2026:7239","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:15087","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:14773","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:10097","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:17596","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8423","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:10081","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8865","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:5063","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:7093","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:6647","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:7106","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:7105","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:5080","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:25096","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:7335","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:16008","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8748","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8746","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8747","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:16009","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:16174","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:7329","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8944","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9832","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:10065","tags":["vendor-advisory","x_refsource_REDHAT"]}],"workarounds":[{"lang":"en","value":"Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"x_generator":{"engine":"sadp-cli 1.0.0"},"descriptions":[{"lang":"en","value":"A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 archive is processed, the decompression routine may enter a state where internal logic prevents forward progress. This condition results in an infinite loop that continuously consumes CPU resources. Because the archive passes checksum validation and appears structurally valid, affected applications cannot detect the issue before processing. This can allow attackers to cause persistent denial-of-service conditions in services that automatically process archives."}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-835","description":"Loop with Unreachable Exit Condition ('Infinite Loop')"}]}],"providerMetadata":{"orgId":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","shortName":"redhat-SADP","dateUpdated":"2026-09-01T12:04:44.081Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T19:10:47.983Z"}}},"related_cves":[{"value":"CVE-2026-4111","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23033,"advisory_id":"95b49fb3-48ff-4c67-935d-8e78d5c9455a","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-74860","source_published_at":"2026-09-08T11:27:45.158+00:00","published_at":"2026-10-25T06:12:18.930308+00:00","extraction_method":"structured","technologies":["cert-manager-support-for-red-hat-openshift-release-1-20","core-cve","red-hat-cost-management-on-premise-1","red-hat-enterprise-linux-10","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9","red-hat-hardened-images","red-hat-openshift-container-platform-4","red-hat-update-infrastructure-5"],"cve_ids":["CVE-2026-74860"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Libxml2: double-free/uaf in libxml2 python bindings","summary":"A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition (DTD) with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callback handler, where a string is freed twice. This flaw can lead to a denial of service (DoS) due to a reproducible crash in Python applications using the libxml2 SAX bindings.","evidence":"cve:CVE-2026-74860","products":[{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Cert Manager support for Red Hat OpenShift release 1.20","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Cost Management On-Premise 1","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-74860","aliases":["CVE-2026-74860"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":8.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:2.12.5-10.el10_2.4","lessThan":"*","versionType":"rpm"}],"packageName":"libxml2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:2.9.7-21.el8_10.9","lessThan":"*","versionType":"rpm"}],"packageName":"libxml2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:2.9.7-21.el8_10.9","lessThan":"*","versionType":"rpm"}],"packageName":"libxml2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:2.9.13-14.el9_8.5","lessThan":"*","versionType":"rpm"}],"packageName":"libxml2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:2.9.13-14.el9_8.5","lessThan":"*","versionType":"rpm"}],"packageName":"libxml2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790589912","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/jetstack-cert-manager-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790589914","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-istio-csr-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","versions":[{"status":"unaffected","version":"1790589855","lessThan":"*","versionType":"rpm"}],"packageName":"cert-manager/cert-manager-operator-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cost_management_on_premise:1::el10"],"vendor":"Red Hat","product":"Red Hat Cost Management On-Premise 1","versions":[{"status":"unaffected","version":"1791460851","lessThan":"*","versionType":"rpm"}],"packageName":"costmanagement/costmanagement-ui-rhel10","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"2.15.4-0.1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"libxml2-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1791978534","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-kubernetes-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1791978528","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1791978528","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/haproxy-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1791964013","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1791978693","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","packageName":"podman","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"libxml2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"libxml2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"container-tools:rhel8/podman","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"podman","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","packageName":"swift-lang","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"podman","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"}],"modified":"2026-10-14T19:02:51.435Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:64463","https://access.redhat.com/errata/RHSA-2026:71585","https://access.redhat.com/errata/RHSA-2026:71586","https://access.redhat.com/errata/RHSA-2026:71641","https://access.redhat.com/errata/RHSA-2026:72470","https://access.redhat.com/errata/RHSA-2026:72475","https://access.redhat.com/errata/RHSA-2026:72476","https://access.redhat.com/errata/RHSA-2026:79357","https://access.redhat.com/errata/RHSA-2026:82939","https://access.redhat.com/security/cve/CVE-2026-74860","https://bugzilla.redhat.com/show_bug.cgi?id=2529697"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-74860","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-08T12:08:31.722346Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-08T12:11:11.416Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T19:02:51.435Z"}}},"related_cves":[{"value":"CVE-2026-74860","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23024,"advisory_id":"992f520e-76d6-41dd-9ad7-3e027fb0742e","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-13732","source_published_at":"2026-08-31T19:23:18.741+00:00","published_at":"2026-10-25T06:11:16.675107+00:00","extraction_method":"structured","technologies":["core-cve","red-hat-cost-management-on-premise-1","red-hat-enterprise-linux-10","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9","red-hat-hardened-images","red-hat-update-infrastructure-5"],"cve_ids":["CVE-2026-13732"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf","summary":"A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-destructor member functions of C++ classes. The bug causes the destructor entries to remain in the main function list while the list length counter is decremented, resulting in an out-of-bounds write when the function list is copied to its final allocated array. An attacker can craft an ELF binary with malicious .stab and .stabstr sections that triggers this out-of-bounds write when a user opens the file in GDB and performs any symbol-inspection operation such as setting a breakpoint. The inferior process does not need to be executed. Under controlled conditions, this was demonstrated to achieve execution of arbitrary commands within the GDB process.","evidence":"cve:CVE-2026-13732","products":[{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Cost Management On-Premise 1","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-13732","aliases":["CVE-2026-13732"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:16.3-3.1.el10_2","lessThan":"*","versionType":"rpm"}],"packageName":"gdb","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:8.2-20.1.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"gdb","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:16.3-3.1.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"gdb","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cost_management_on_premise:1::el10"],"vendor":"Red Hat","product":"Red Hat Cost Management On-Premise 1","versions":[{"status":"unaffected","version":"1791460851","lessThan":"*","versionType":"rpm"}],"packageName":"costmanagement/costmanagement-ui-rhel10","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"17.2-6.2.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"gdb-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1791978534","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-kubernetes-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1791978528","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/cds-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1791978528","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/haproxy-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1791964013","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/installer-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1791978693","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"gdb","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"gdb","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-14T19:02:17.891Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:73425","https://access.redhat.com/errata/RHSA-2026:73426","https://access.redhat.com/errata/RHSA-2026:73427","https://access.redhat.com/errata/RHSA-2026:79357","https://access.redhat.com/errata/RHSA-2026:82447","https://access.redhat.com/errata/RHSA-2026:82939","https://access.redhat.com/security/cve/CVE-2026-13732","https://bugzilla.redhat.com/show_bug.cgi?id=2494416"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-13732","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-01T14:33:22.469791Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-01T14:59:18.300Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T19:02:17.891Z"}}},"related_cves":[{"value":"CVE-2026-13732","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":16309,"advisory_id":"8349ffea-f431-4e51-a996-887063205509","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-89091","source_published_at":"2026-10-08T21:49:30.953+00:00","published_at":"2026-10-25T01:13:52.869673+00:00","extraction_method":"structured","technologies":["core-cve","migration-toolkit-for-applications-8","migration-toolkit-for-virtualization","openshift-service-mesh-3","red-hat-advanced-cluster-management-for-kubernetes-2","red-hat-ansible-automation-platform-2","red-hat-ansible-automation-platform-ansible-core-2","red-hat-certification-program-for-red-hat-enterprise-linux-9","red-hat-discovery-2","red-hat-enterprise-linux-10","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9","red-hat-openshift-container-platform-4","red-hat-openstack-platform-17-1","red-hat-openstack-platform-18-0","red-hat-satellite-6","red-hat-update-infrastructure-5","self-service-automation-portal-2"],"cve_ids":["CVE-2026-89091"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution","summary":"A flaw was found in ansible-core. When installing a collection with `ansible-galaxy collection install`, the archive extractor validates member paths using lexical path normalisation (os.path.abspath) instead of resolving symbolic links (os.path.realpath), and it performs no containment check on symlink-typed directory members before creating them. A crafted collection tarball can chain symlink directory entries so that a subsequent file member is written outside the intended destination directory. This allows an attacker who can get a victim to install a malicious collection to overwrite arbitrary files with the privileges of the user running ansible-galaxy, leading to code execution on the control node. This is a bypass of the fix for CVE-2020-10691.","evidence":"cve:CVE-2026-89091","products":[{"name":{"value":"Migration Toolkit for Applications 8","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Migration Toolkit for Virtualization","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"OpenShift Service Mesh 3","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Advanced Cluster Management for Kubernetes 2","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Advanced Cluster Management for Kubernetes 2","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/31/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/32/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/33/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/34/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/35/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/36/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/37/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/38/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/39/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/40/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/41/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/42/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/43/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/44/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/45/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/46/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/47/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/48/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/49/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/50/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/51/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/52/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/53/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/54/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform Ansible Core 2","evidence":"/containers/cna/affected/55/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform Ansible Core 2","evidence":"/containers/cna/affected/56/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform Ansible Core 2","evidence":"/containers/cna/affected/57/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform Ansible Core 2","evidence":"/containers/cna/affected/58/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Certification Program for Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/59/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/60/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/61/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/62/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/63/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/64/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenStack Platform 17.1","evidence":"/containers/cna/affected/65/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenStack Platform 18.0","evidence":"/containers/cna/affected/66/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Satellite 6","evidence":"/containers/cna/affected/67/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/68/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/69/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/70/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/71/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Self-service automation portal 2","evidence":"/containers/cna/affected/72/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-89091","aliases":["CVE-2026-89091"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"cpes":["cpe:/a:redhat:migration_toolkit_applications:8"],"vendor":"Red Hat","product":"Migration Toolkit for Applications 8","packageName":"mta/mta-rhel9-operator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:migration_toolkit_virtualization:2"],"vendor":"Red Hat","product":"Migration Toolkit for Virtualization","packageName":"migration-toolkit-virtualization/mtv-rhel9-operator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:service_mesh:3"],"vendor":"Red Hat","product":"OpenShift Service Mesh 3","packageName":"openshift-service-mesh/kiali-rhel9-operator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:acm:2"],"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","packageName":"rhacm2/volsync-operator-bundle","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:acm:2"],"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","packageName":"rhacm2/volsync-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-24/de-minimal-rhel8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-24/de-minimal-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-24/ee-minimal-rhel8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-24/ee-minimal-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-24/hub-rhel8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-24/lightspeed-rhel8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-25/ansible-dev-tools-rhel8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-25/de-minimal-rhel8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-25/de-minimal-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-25/eda-controller-rhel8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-25/ee-minimal-rhel8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-25/ee-minimal-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-25/hub-rhel8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-25/lightspeed-rhel8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-26/ansible-dev-tools-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-26/controller-rhel9-operator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-26/de-minimal-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-26/de-supported-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-26/eda-controller-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-26/eda-controller-rhel9-operator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-26/ee-minimal-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-26/ee-supported-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-26/gateway-rhel9-operator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-26/hub-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-26/hub-rhel9-operator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-26/lightspeed-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-26/lightspeed-rhel9-operator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-26/platform-resource-rhel9-operator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-26/platform-resource-runner-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-27/aap-cloud-billing-operator-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-27/ansible-devspaces-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-27/ansible-dev-tools-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-27/controller-rhel9-operator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-27/de-minimal-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-27/de-supported-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-27/eda-controller-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-27/eda-controller-rhel9-operator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-27/ee-minimal-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-27/ee-supported-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-27/gateway-rhel9-operator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-27/hub-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-27/hub-rhel9-operator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-27/lightspeed-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-27/lightspeed-rhel9-operator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-27/metrics-service-rhel9-operator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-27/platform-resource-rhel9-operator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-27/platform-resource-runner-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-tech-preview/ansible-devspaces-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-tech-preview/metrics-service-rhel9-operator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-core","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_core:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform Ansible Core 2","packageName":"ansible-automation-platform/ee-minimal-rhel8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_core:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform Ansible Core 2","packageName":"ansible-automation-platform/ee-minimal-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_core:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform Ansible Core 2","packageName":"ansible-automation-platform-tech-preview/ee-minimal-rhel8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_core:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform Ansible Core 2","packageName":"ansible-automation-platform-tech-preview/ee-minimal-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:certifications:9"],"vendor":"Red Hat","product":"Red Hat Certification Program for Red Hat Enterprise Linux 9","packageName":"rhcertification/redhat-certification-system-ai","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","packageName":"discovery/discovery-server-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","packageName":"ansible-core","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"ansible-core","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"ansible-core","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/ose-ansible-rhel9-operator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openstack:17.1"],"vendor":"Red Hat","product":"Red Hat OpenStack Platform 17.1","packageName":"openstack-ansible-core","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openstack:18.0"],"vendor":"Red Hat","product":"Red Hat OpenStack Platform 18.0","packageName":"rhoso-operators/ee-openstack-ansible-ee-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:satellite:6"],"vendor":"Red Hat","product":"Red Hat Satellite 6","packageName":"ansible-core","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","packageName":"rhui5/installer-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","packageName":"rhui5/installer-tp-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","packageName":"rhui5/rhua-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","packageName":"rhui5/rhua-tp-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_portal:2"],"vendor":"Red Hat","product":"Self-service automation portal 2","packageName":"ansible-automation-platform/bootc-automation-portal-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-09T15:13:02.773Z","provider":"cve","references":["https://access.redhat.com/security/cve/CVE-2026-89091","https://bugzilla.redhat.com/show_bug.cgi?id=2531646"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-89091","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-09T15:00:00.715697Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-09T15:13:02.773Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-08T21:49:30.953Z"}}},"related_cves":[{"value":"CVE-2026-89091","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":15714,"advisory_id":"ee241307-e719-448d-a800-595396938907","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-12701","source_published_at":"2026-07-20T14:18:18.318+00:00","published_at":"2026-10-25T01:04:42.411689+00:00","extraction_method":"structured","technologies":["core-cve","red-hat-ansible-automation-platform-2","red-hat-ansible-automation-platform-2-5-for-rhel-8","red-hat-ansible-automation-platform-2-5-for-rhel-9","red-hat-ansible-automation-platform-2-6","red-hat-ansible-automation-platform-2-6-for-rhel-9","red-hat-ansible-automation-platform-2-7","red-hat-satellite-6-16-for-rhel-8","red-hat-satellite-6-16-for-rhel-9","red-hat-satellite-6-17-for-rhel-9","red-hat-satellite-6-18-for-rhel-9","red-hat-satellite-6-19-for-rhel-9","red-hat-update-infrastructure-4-for-cloud-providers","red-hat-update-infrastructure-5"],"cve_ids":["CVE-2026-12701"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Pulpcore: pulpcore: relative_path_validator bypass via directory traversal in filesystemexport","summary":"A path traversal vulnerability was found in pulpcore. The relative_path_validator function only verifies that content paths do not begin with \"/\" but fails to block directory traversal sequences such as \"../\" anywhere in the path. An authenticated administrator can craft a relative_path containing embedded traversal sequences (e.g., \"looking/normal/../../../../etc/shadow\") that escapes the intended export directory during FilesystemExport operations. Because the file content is also user-controlled (uploaded artifact), this allows arbitrary file write to any location writable by the Pulp service user, potentially leading to service compromise or further system exploitation.","evidence":"cve:CVE-2026-12701","products":[{"name":{"value":"Red Hat Ansible Automation Platform 2.5 for RHEL 8","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2.5 for RHEL 9","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2.6 for RHEL 9","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Satellite 6.16 for RHEL 8","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Satellite 6.16 for RHEL 8","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Satellite 6.16 for RHEL 9","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Satellite 6.16 for RHEL 9","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Satellite 6.17 for RHEL 9","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Satellite 6.17 for RHEL 9","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Satellite 6.18 for RHEL 9","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Satellite 6.18 for RHEL 9","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Satellite 6.19 for RHEL 9","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Satellite 6.19 for RHEL 9","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2.6","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2.7","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 4 for Cloud Providers","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2026-12701","aliases":["CVE-2026-12701"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"HIGH","confidentialityImpact":"LOW"}}],"affected":[{"cpes":["cpe:/a:redhat:ansible_automation_platform:2.5::el8","cpe:/a:redhat:ansible_automation_platform:2.5::el9","cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8","cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9","cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8","cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2.5 for RHEL 8","versions":[{"status":"unaffected","version":"0:3.49.63-2.el8ap","lessThan":"*","versionType":"rpm"}],"packageName":"python3.12-pulpcore","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2.5::el8","cpe:/a:redhat:ansible_automation_platform:2.5::el9","cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8","cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9","cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8","cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2.5 for RHEL 9","versions":[{"status":"unaffected","version":"0:3.49.63-2.el9ap","lessThan":"*","versionType":"rpm"}],"packageName":"python3.12-pulpcore","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2.6::el10","cpe:/a:redhat:ansible_automation_platform:2.6::el9","cpe:/a:redhat:ansible_automation_platform_developer:2.6::el10","cpe:/a:redhat:ansible_automation_platform_developer:2.6::el9","cpe:/a:redhat:ansible_automation_platform_inside:2.6::el9"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2.6 for RHEL 9","versions":[{"status":"unaffected","version":"0:3.49.63-2.el9ap","lessThan":"*","versionType":"rpm"}],"packageName":"python3.12-pulpcore","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:satellite:6.16::el8","cpe:/a:redhat:satellite:6.16::el9","cpe:/a:redhat:satellite_capsule:6.16::el8","cpe:/a:redhat:satellite_capsule:6.16::el9","cpe:/a:redhat:satellite_utils:6.16::el8","cpe:/a:redhat:satellite_utils:6.16::el9"],"vendor":"Red Hat","product":"Red Hat Satellite 6.16 for RHEL 8","versions":[{"status":"unaffected","version":"0:3.49.39-2.el8pc","lessThan":"*","versionType":"rpm"}],"packageName":"python-pulpcore","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:satellite:6.16::el8","cpe:/a:redhat:satellite:6.16::el9","cpe:/a:redhat:satellite_capsule:6.16::el8","cpe:/a:redhat:satellite_capsule:6.16::el9","cpe:/a:redhat:satellite_utils:6.16::el8","cpe:/a:redhat:satellite_utils:6.16::el9"],"vendor":"Red Hat","product":"Red Hat Satellite 6.16 for RHEL 8","versions":[{"status":"unaffected","version":"0:3.49.39-2.el8pc","lessThan":"*","versionType":"rpm"}],"packageName":"python-pulpcore","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:satellite:6.16::el8","cpe:/a:redhat:satellite:6.16::el9","cpe:/a:redhat:satellite_capsule:6.16::el8","cpe:/a:redhat:satellite_capsule:6.16::el9","cpe:/a:redhat:satellite_utils:6.16::el8","cpe:/a:redhat:satellite_utils:6.16::el9"],"vendor":"Red Hat","product":"Red Hat Satellite 6.16 for RHEL 9","versions":[{"status":"unaffected","version":"0:3.49.39-2.el9pc","lessThan":"*","versionType":"rpm"}],"packageName":"python-pulpcore","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:satellite:6.16::el8","cpe:/a:redhat:satellite:6.16::el9","cpe:/a:redhat:satellite_capsule:6.16::el8","cpe:/a:redhat:satellite_capsule:6.16::el9","cpe:/a:redhat:satellite_utils:6.16::el8","cpe:/a:redhat:satellite_utils:6.16::el9"],"vendor":"Red Hat","product":"Red Hat Satellite 6.16 for RHEL 9","versions":[{"status":"unaffected","version":"0:3.49.39-2.el9pc","lessThan":"*","versionType":"rpm"}],"packageName":"python-pulpcore","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","versions":[{"status":"unaffected","version":"0:3.63.21-2.el9pc","lessThan":"*","versionType":"rpm"}],"packageName":"python-pulpcore","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","versions":[{"status":"unaffected","version":"0:3.63.21-2.el9pc","lessThan":"*","versionType":"rpm"}],"packageName":"python-pulpcore","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:satellite:6.18::el9","cpe:/a:redhat:satellite_capsule:6.18::el9","cpe:/a:redhat:satellite_utils:6.18::el9"],"vendor":"Red Hat","product":"Red Hat Satellite 6.18 for RHEL 9","versions":[{"status":"unaffected","version":"0:3.73.30-2.el9pc","lessThan":"*","versionType":"rpm"}],"packageName":"python3.12-pulpcore","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:satellite:6.18::el9","cpe:/a:redhat:satellite_capsule:6.18::el9","cpe:/a:redhat:satellite_utils:6.18::el9"],"vendor":"Red Hat","product":"Red Hat Satellite 6.18 for RHEL 9","versions":[{"status":"unaffected","version":"0:3.73.30-2.el9pc","lessThan":"*","versionType":"rpm"}],"packageName":"python3.12-pulpcore","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:satellite:6.19::el9","cpe:/a:redhat:satellite_capsule:6.19::el9","cpe:/a:redhat:satellite_utils:6.19::el9"],"vendor":"Red Hat","product":"Red Hat Satellite 6.19 for RHEL 9","versions":[{"status":"unaffected","version":"0:3.85.15-5.el9pc","lessThan":"*","versionType":"rpm"}],"packageName":"python3.12-pulpcore","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:satellite:6.19::el9","cpe:/a:redhat:satellite_capsule:6.19::el9","cpe:/a:redhat:satellite_utils:6.19::el9"],"vendor":"Red Hat","product":"Red Hat Satellite 6.19 for RHEL 9","versions":[{"status":"unaffected","version":"0:3.85.15-5.el9pc","lessThan":"*","versionType":"rpm"}],"packageName":"python3.12-pulpcore","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2.6::el9"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2.6","versions":[{"status":"unaffected","version":"1783979593","lessThan":"*","versionType":"rpm"}],"packageName":"ansible-automation-platform-26/hub-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2.7::el9"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2.7","versions":[{"status":"unaffected","version":"1783919521","lessThan":"*","versionType":"rpm"}],"packageName":"ansible-automation-platform-27/hub-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"python-pulpcore","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:rhui:4::el8"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 4 for Cloud Providers","packageName":"python-pulpcore","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","packageName":"python-pulpcore-client","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-08T20:14:40.924Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:42078","https://access.redhat.com/errata/RHSA-2026:42079","https://access.redhat.com/errata/RHSA-2026:42082","https://access.redhat.com/errata/RHSA-2026:42132","https://access.redhat.com/errata/RHSA-2026:42142","https://access.redhat.com/errata/RHSA-2026:42150","https://access.redhat.com/errata/RHSA-2026:42151","https://access.redhat.com/errata/RHSA-2026:42240","https://access.redhat.com/security/cve/CVE-2026-12701","https://bugzilla.redhat.com/show_bug.cgi?id=2490703"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-12701","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-07-22T18:13:39.913416Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-22T18:13:49.559Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-08T20:14:40.924Z"}}},"related_cves":[{"value":"CVE-2026-12701","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":12201,"advisory_id":"c7407949-e1f3-419c-8cf0-dafa808065bb","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-103870","source_published_at":"2026-10-07T05:46:18.911+00:00","published_at":"2026-10-25T00:03:16.660839+00:00","extraction_method":"structured","technologies":["core-cve","red-hat-satellite-6","red-hat-update-infrastructure-4-for-cloud-providers","red-hat-update-infrastructure-5"],"cve_ids":["CVE-2026-103870"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Pulp-rpm: distribution tree publish creates directories from .treeinfo ids","summary":"A flaw was found in pulp-rpm when it publishes a distribution tree. Addon and variant ids from .treeinfo are used as directory names. A user who can sync or upload that tree can make the publish task create a new directory outside the task work area and write that tree's repository metadata and packages there, as the Pulp worker user. An existing file or directory is not replaced. The flaw does not disclose data and does not stop the service.","evidence":"cve:CVE-2026-103870","products":[{"name":{"value":"Red Hat Satellite 6","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Satellite 6","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 4 for Cloud Providers","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 4 for Cloud Providers","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-103870","aliases":["CVE-2026-103870"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"NONE"}}],"affected":[{"cpes":["cpe:/a:redhat:satellite:6"],"vendor":"Red Hat","product":"Red Hat Satellite 6","packageName":"python3.12-pulp-rpm","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:satellite:6"],"vendor":"Red Hat","product":"Red Hat Satellite 6","packageName":"python-pulp-rpm","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:4::el8"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 4 for Cloud Providers","packageName":"python-pulp-rpm","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:rhui:4::el8"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 4 for Cloud Providers","packageName":"python-pulp-rpm-client","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","packageName":"python-pulp-rpm-client","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","packageName":"rhui5/rhua-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","packageName":"rhui5/rhua-tp-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"}],"modified":"2026-10-07T19:28:12.925Z","provider":"cve","references":["https://access.redhat.com/security/cve/CVE-2026-103870","https://bugzilla.redhat.com/show_bug.cgi?id=2544606"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-103870","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-07T19:27:57.474141Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-07T19:28:12.925Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-07T17:36:03.325Z"}}},"related_cves":[{"value":"CVE-2026-103870","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":7821,"advisory_id":"9d1c7850-2c8d-4ed7-a101-1edf8315c7e7","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-10911","source_published_at":"2025-09-25T15:13:14.21+00:00","published_at":"2026-10-24T22:50:30.625503+00:00","extraction_method":"structured","technologies":["core-cve","red-hat-discovery-2","red-hat-enterprise-linux-10","red-hat-enterprise-linux-10-0-extended-update-support","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-8-4-advanced-mission-critical-update-support","red-hat-enterprise-linux-8-4-extended-update-support-long-life-add-on","red-hat-enterprise-linux-8-6-advanced-mission-critical-update-support","red-hat-enterprise-linux-8-6-extended-update-support-long-life-add-on","red-hat-enterprise-linux-8-8-telecommunications-update-service","red-hat-enterprise-linux-8-8-update-services-for-sap-solutions","red-hat-enterprise-linux-9","red-hat-enterprise-linux-9-2-update-services-for-sap-solutions","red-hat-enterprise-linux-9-4-update-services-for-sap-solutions","red-hat-enterprise-linux-9-6-extended-update-support","red-hat-hardened-images","red-hat-openshift-ai-3-4","red-hat-openshift-container-platform-4","red-hat-update-infrastructure-5"],"cve_ids":["CVE-2025-10911"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Libxslt: use-after-free with key data stored cross-rvt","summary":"A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash.","evidence":"cve:CVE-2025-10911","products":[{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10.0 Extended Update Support","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9.6 Extended Update Support","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift AI 3.4","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2025-10911","aliases":["CVE-2025-10911"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"1.1.43"}],"packageName":"libxslt","collectionURL":"https://gitlab.gnome.org/GNOME/libxslt","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:1.1.39-8.el10_2.1","lessThan":"*","versionType":"rpm"}],"packageName":"libxslt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:1.1.39-8.el10_0.1","lessThan":"*","versionType":"rpm"}],"packageName":"libxslt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:1.1.32-6.4.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"libxslt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:1.1.32-6.4.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"libxslt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:1.1.32-8.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"libxslt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:1.1.32-8.el8_4.1","lessThan":"*","versionType":"rpm"}],"packageName":"libxslt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","versions":[{"status":"unaffected","version":"0:1.1.32-8.el8_6.1","lessThan":"*","versionType":"rpm"}],"packageName":"libxslt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","versions":[{"status":"unaffected","version":"0:1.1.32-8.el8_6.1","lessThan":"*","versionType":"rpm"}],"packageName":"libxslt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","versions":[{"status":"unaffected","version":"0:1.1.32-8.el8_8.1","lessThan":"*","versionType":"rpm"}],"packageName":"libxslt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:1.1.32-8.el8_8.1","lessThan":"*","versionType":"rpm"}],"packageName":"libxslt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::appstream"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:1.1.34-14.el9_8.1","lessThan":"*","versionType":"rpm"}],"packageName":"libxslt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.2::appstream"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:1.1.34-12.el9_2","lessThan":"*","versionType":"rpm"}],"packageName":"libxslt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_e4s:9.4::appstream"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","versions":[{"status":"unaffected","version":"0:1.1.34-15.el9_4","lessThan":"*","versionType":"rpm"}],"packageName":"libxslt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6::appstream"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:1.1.34-13.el9_6.2","lessThan":"*","versionType":"rpm"}],"packageName":"libxslt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","versions":[{"status":"unaffected","version":"1782756541","lessThan":"*","versionType":"rpm"}],"packageName":"discovery/discovery-ui-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"1.1.45-0.1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"libxslt-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","versions":[{"status":"unaffected","version":"1790703542","lessThan":"*","versionType":"rpm"}],"packageName":"rhai/base-image-neuron-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1784795076","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","versions":[{"status":"unaffected","version":"1787241260","lessThan":"*","versionType":"rpm"}],"packageName":"rhui5/rhua-tp-rhel9","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"libxslt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"libxslt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-02T02:19:31.944Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:11015","https://access.redhat.com/errata/RHSA-2026:26355","https://access.redhat.com/errata/RHSA-2026:28243","https://access.redhat.com/errata/RHSA-2026:28584","https://access.redhat.com/errata/RHSA-2026:29807","https://access.redhat.com/errata/RHSA-2026:29809","https://access.redhat.com/errata/RHSA-2026:29811","https://access.redhat.com/errata/RHSA-2026:29814","https://access.redhat.com/errata/RHSA-2026:29975","https://access.redhat.com/errata/RHSA-2026:29976","https://access.redhat.com/errata/RHSA-2026:30847","https://access.redhat.com/errata/RHSA-2026:33313","https://access.redhat.com/errata/RHSA-2026:44481","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/security/cve/CVE-2025-10911","https://bugzilla.redhat.com/show_bug.cgi?id=2397838","https://gitlab.gnome.org/GNOME/libxslt/-/issues/144","https://gitlab.gnome.org/GNOME/libxslt/-/merge_requests/77"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2025-10911","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-09-29T15:48:55.245495Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-09-29T15:49:06.055Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-02T02:19:31.944Z"}}},"related_cves":[{"value":"CVE-2025-10911","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}}],"next_after":24336,"next_before":7821}