csaf_bsi_aggregator:rhsa-2026:69945
HIGH CVSS 7.5 csaf_bsi_aggregator
Description
Red Hat OpenShift Builds 1.8.2
Timeline
- Published
- 2026-09-22 09:13 UTC
- Last Modified
- 2026-09-22
CVSS Details
CVSS details not available.
Affected Products
No product information available.
References
No references available.
Linked Vulnerabilities
No linked vulnerabilities found.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright © Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Builds 1.8.2",
"title": "Topic"
},
{
"category": "general",
"text": "Release of Red Hat OpenShift Builds 1.8.2",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:69945",
"url": "https://access.redhat.com/errata/RHSA-2026:69945"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33818",
"url": "https://access.redhat.com/security/cve/CVE-2026-33818"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-41178",
"url": "https://access.redhat.com/security/cve/CVE-2026-41178"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56852",
"url": "https://access.redhat.com/security/cve/CVE-2026-56852"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56853",
"url": "https://access.redhat.com/security/cve/CVE-2026-56853"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56854",
"url": "https://access.redhat.com/security/cve/CVE-2026-56854"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56858",
"url": "https://access.redhat.com/security/cve/CVE-2026-56858"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56859",
"url": "https://access.redhat.com/security/cve/CVE-2026-56859"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56860",
"url": "https://access.redhat.com/security/cve/CVE-2026-56860"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56862",
"url": "https://access.redhat.com/security/cve/CVE-2026-56862"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-71556",
"url": "https://access.redhat.com/security/cve/CVE-2026-71556"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69945.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Builds 1.8.2",
"tracking": {
"current_release_date": "2026-09-22T13:02:48+00:00",
"generator": {
"date": "2026-09-22T13:02:48+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.0"
}
},
"id": "RHSA-2026:69945",
"initial_release_date": "2026-09-22T09:13:07+00:00",
"revision_history": [
{
"date": "2026-09-22T09:13:07+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-22T09:13:09+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-22T13:02:48+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Builds 1.8.1",
"product": {
"name": "Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_builds:1.8::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Builds"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913?arch=amd64&repository_url=registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9&tag=1789975753"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3Add8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699?arch=amd64&repository_url=registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9&tag=1789976227"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3Adeea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230?arch=amd64&repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9&tag=1789975447"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3Afa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6?arch=amd64&repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9&tag=1789975085"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3Adadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9?arch=amd64&repository_url=registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator&tag=1790059806"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-operator-bundle@sha256%3Af10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33?arch=amd64&repository_url=registry.redhat.io/openshift-builds/openshift-builds-operator-bundle&tag=1790062639"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3A3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf?arch=amd64&repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9&tag=1790058990"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3A52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915?arch=amd64&repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9&tag=1790058982"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3A6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e?arch=amd64&repository_url=registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9&tag=1789975925"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d?arch=amd64&repository_url=registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9&tag=1789976300"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3Adaac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477?arch=arm64&repository_url=registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9&tag=1789975753"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3Acc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f?arch=arm64&repository_url=registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9&tag=1789976227"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3A332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53?arch=arm64&repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9&tag=1789975447"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3A56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2?arch=arm64&repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9&tag=1789975085"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3Aead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe?arch=arm64&repository_url=registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator&tag=1790059806"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3A87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7?arch=arm64&repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9&tag=1790058990"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3A47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd?arch=arm64&repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9&tag=1790058982"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3Ade16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040?arch=arm64&repository_url=registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9&tag=1789975925"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8?arch=arm64&repository_url=registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9&tag=1789976300"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d?arch=ppc64le&repository_url=registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9&tag=1789975753"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3A69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed?arch=ppc64le&repository_url=registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9&tag=1789976227"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3A9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d?arch=ppc64le&repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9&tag=1789975447"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3Ab4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5?arch=ppc64le&repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9&tag=1789975085"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3Ab570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f?arch=ppc64le&repository_url=registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator&tag=1790059806"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3Af0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78?arch=ppc64le&repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9&tag=1790058990"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3Ad4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62?arch=ppc64le&repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9&tag=1790058982"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3A26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6?arch=ppc64le&repository_url=registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9&tag=1789975925"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00?arch=ppc64le&repository_url=registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9&tag=1789976300"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3Ab868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa?arch=s390x&repository_url=registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9&tag=1789975753"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3A3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8?arch=s390x&repository_url=registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9&tag=1789976227"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3A39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2?arch=s390x&repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9&tag=1789975447"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3Ac98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2?arch=s390x&repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9&tag=1789975085"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3Aeb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03?arch=s390x&repository_url=registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator&tag=1790059806"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3A49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304?arch=s390x&repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9&tag=1790058990"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3A66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb?arch=s390x&repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9&tag=1790058982"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3Afbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52?arch=s390x&repository_url=registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9&tag=1789975925"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3?arch=s390x&repository_url=registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9&tag=1789976300"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64 as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le as a component of Red Hat OpenShift Builds 1.8.1",
"product_id": "Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.8.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-33818",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')"
},
"discovery_date": "2026-08-13T22:12:37.151735+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in the Go encoding/asn1 package, as it can be triggered remotely without authentication. An attacker can provide a malformed ASN.1 structure, causing excessive recursion during unmarshalling and leading to stack exhaustion, which can render the service unavailable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33818"
},
{
"category": "external",
"summary": "RHBZ#2515815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33818",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33818"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818"
},
{
"category": "external",
"summary": "https://go.dev/cl/814980",
"url": "https://go.dev/cl/814980"
},
{
"category": "external",
"summary": "https://go.dev/issue/80405",
"url": "https://go.dev/issue/80405"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5972",
"url": "https://pkg.go.dev/vuln/GO-2026-5972"
}
],
"release_date": "2026-08-13T21:58:52.821000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-22T09:13:07+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.z upgrade to 1.8.2",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69945"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal"
},
{
"cve": "CVE-2026-41178",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-04T16:01:10.300537+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484830"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in OpenTelemetry-Go, affecting versions 1.41.0 and 1.43.0. An attacker can exploit this flaw by sending oversized baggage headers, causing the `Parse` function to process invalid inputs and log errors, which can lead to resource exhaustion and service disruption in Red Hat products utilizing these affected OpenTelemetry-Go versions. The impact is considered Important due to the potential for remote, unauthenticated denial of service.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-41178"
},
{
"category": "external",
"summary": "RHBZ#2484830",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484830"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-41178",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41178"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-go/pull/7880",
"url": "https://github.com/open-telemetry/opentelemetry-go/pull/7880"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835",
"url": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835"
}
],
"release_date": "2026-06-04T14:38:23.707000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-22T09:13:07+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.z upgrade to 1.8.2",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69945"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers"
},
{
"cve": "CVE-2026-56852",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition ('Infinite Loop')"
},
"discovery_date": "2026-07-21T20:01:56.266823+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2504233"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 (Unicode Transformation Format - 8-bit) bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of Service (DoS) condition where the affected application becomes unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: This flaw in the `golang.org/x/text` library can lead to a denial of service. An attacker could provide specially crafted invalid UTF-8 input to an application using the affected `norm.Iter` functionality, causing it to enter an infinite loop and become unresponsive.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56852"
},
{
"category": "external",
"summary": "RHBZ#2504233",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504233"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56852",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56852"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56852",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56852"
},
{
"category": "external",
"summary": "https://go.dev/cl/794100",
"url": "https://go.dev/cl/794100"
},
{
"category": "external",
"summary": "https://go.dev/issue/80142",
"url": "https://go.dev/issue/80142"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5970",
"url": "https://pkg.go.dev/vuln/GO-2026-5970"
}
],
"release_date": "2026-07-21T19:18:59.951000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-22T09:13:07+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.z upgrade to 1.8.2",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input"
},
{
"cve": "CVE-2026-56853",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-08-13T22:14:53.561638+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515827"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/http` component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the `ReadHeaderTimeout` is not correctly applied during this process. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: Unencrypted HTTP/2 servers are susceptible to a denial of service due to improper handling of ReadHeaderTimeout during the client preface reading phase. This can lead to resource exhaustion and service unavailability in affected Red Hat products configured to support unencrypted HTTP/2.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56853"
},
{
"category": "external",
"summary": "RHBZ#2515827",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515827"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56853",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56853"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56853",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56853"
},
{
"category": "external",
"summary": "https://go.dev/cl/795540",
"url": "https://go.dev/cl/795540"
},
{
"category": "external",
"summary": "https://go.dev/issue/80205",
"url": "https://go.dev/issue/80205"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6089",
"url": "https://pkg.go.dev/vuln/GO-2026-6089"
}
],
"release_date": "2026-08-13T21:58:53.092000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-22T09:13:07+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.z upgrade to 1.8.2",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69945"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service"
},
{
"cve": "CVE-2026-56854",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-08-28T15:33:34.404578+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2525639"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The component failed to properly enforce source-address restrictions for several authentication methods, including password and keyboard-interactive callbacks. In applications that misuse the ServerConfig.PublicKeyCallback callback to make security relevant authorization decisions, an attacker with a valid key could bypass network-based access controls to gain additional privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authentication bypass due to unenforced source-address restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability severity is Important due to the requirement that an attacker already have a valid private key. A flaw in golang.org/x/crypto/ssh allows remote attackers to bypass source-address restrictions for certain authentication methods. This would allow an attacker to use a valid key for gaining additional privileges outside of the bounds of the network-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56854"
},
{
"category": "external",
"summary": "RHBZ#2525639",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2525639"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56854",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56854"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56854",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56854"
},
{
"category": "external",
"summary": "https://go.dev/cl/797040",
"url": "https://go.dev/cl/797040"
},
{
"category": "external",
"summary": "https://go.dev/issue/80213",
"url": "https://go.dev/issue/80213"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6303",
"url": "https://pkg.go.dev/vuln/GO-2026-6303"
}
],
"release_date": "2026-08-28T15:14:26.918000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-22T09:13:07+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.z upgrade to 1.8.2",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authentication bypass due to unenforced source-address restrictions"
},
{
"cve": "CVE-2026-56858",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"
},
"discovery_date": "2026-08-13T22:16:32.034590+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515838"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash ('/'), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user's browser, potentially compromising user data or actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important cross-site scripting (XSS) vulnerability in the Go `html/template` package. Applications utilizing this package to render untrusted input are susceptible to arbitrary content injection due to a flaw in how pathological inputs are handled, potentially leading to client-side script execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56858"
},
{
"category": "external",
"summary": "RHBZ#2515838",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515838"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56858",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56858"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858"
},
{
"category": "external",
"summary": "https://go.dev/cl/807100",
"url": "https://go.dev/cl/807100"
},
{
"category": "external",
"summary": "https://go.dev/issue/80435",
"url": "https://go.dev/issue/80435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6091",
"url": "https://pkg.go.dev/vuln/GO-2026-6091"
}
],
"release_date": "2026-08-13T21:58:53.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-22T09:13:07+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.z upgrade to 1.8.2",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69945"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input"
},
{
"cve": "CVE-2026-56859",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')"
},
"discovery_date": "2026-08-13T22:16:52.493058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515840"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An Important denial of service flaw affects applications utilizing the Go `encoding/xml` package. This vulnerability arises from an issue in XML decoding where a recursion depth counter fails to reset, potentially leading to stack exhaustion when processing malicious XML input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56859"
},
{
"category": "external",
"summary": "RHBZ#2515840",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515840"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56859",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56859"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859"
},
{
"category": "external",
"summary": "https://go.dev/cl/803320",
"url": "https://go.dev/cl/803320"
},
{
"category": "external",
"summary": "https://go.dev/issue/80481",
"url": "https://go.dev/issue/80481"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6088",
"url": "https://pkg.go.dev/vuln/GO-2026-6088"
}
],
"release_date": "2026-08-13T21:58:52.959000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-22T09:13:07+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.z upgrade to 1.8.2",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue"
},
{
"cve": "CVE-2026-56860",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-08-13T22:13:18.319384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory ('..') segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in the Go `net/url` package. Applications built with Go that process untrusted URLs containing parent directory segments ('..') may be vulnerable to excessive resource consumption due to quadratic time complexity in path resolution. This can lead to a denial of service, impacting the availability of affected services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56860"
},
{
"category": "external",
"summary": "RHBZ#2515820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56860",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56860"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860"
},
{
"category": "external",
"summary": "https://go.dev/cl/803681",
"url": "https://go.dev/cl/803681"
},
{
"category": "external",
"summary": "https://go.dev/issue/80494",
"url": "https://go.dev/issue/80494"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6218",
"url": "https://pkg.go.dev/vuln/GO-2026-6218"
}
],
"release_date": "2026-08-13T21:58:53.731000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-22T09:13:07+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.z upgrade to 1.8.2",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69945"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution"
},
{
"cve": "CVE-2026-56862",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-08-13T22:16:41.928450+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515839"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `golang` `crypto/tls` package. A remote, unauthenticated attacker can exploit this flaw by continuously sending `KeyUpdate` messages during a TLS handshake, forcing the server to perform indefinite key derivation operations. This resource exhaustion can lead to a denial of service for applications and services in Red Hat products that use the affected `crypto/tls` library and are exposed to untrusted network clients.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56862"
},
{
"category": "external",
"summary": "RHBZ#2515839",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515839"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56862",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56862"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862"
},
{
"category": "external",
"summary": "https://go.dev/cl/804261",
"url": "https://go.dev/cl/804261"
},
{
"category": "external",
"summary": "https://go.dev/issue/80528",
"url": "https://go.dev/issue/80528"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6090",
"url": "https://pkg.go.dev/vuln/GO-2026-6090"
}
],
"release_date": "2026-08-13T21:58:53.216000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-22T09:13:07+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.z upgrade to 1.8.2",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69945"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages"
},
{
"cve": "CVE-2026-71556",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access ('Link Following')"
},
"discovery_date": "2026-08-07T16:51:14.251077+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2512562"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in go-git, an extensible Git implementation library. Worktree operations, such as checkout, status, and add, resolve symbolic links within the working tree without proper boundary confinement. This allows a remote attacker to craft a malicious repository containing a symlink, which, when cloned and its worktree operations are used, can lead to reading from or writing to arbitrary files outside the intended working directory. This could result in information disclosure or arbitrary file modification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-git/go-git/v5: go-git: Arbitrary file read/write via symbolic link resolution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "go-git is a pure-Go implementation of Git. During worktree operations (checkout, status, add), go-git resolves symbolic links without confining resolution to the worktree boundary, so a maliciously crafted repository containing a symlink can cause a consuming application to read from or write to files outside the intended working directory when that repository is cloned and its worktree operations are used. Exploitation requires the application to clone an attacker-controlled repository and then perform worktree operations against it; applications that only process trusted repositories are not exposed. Red Hat rates the impact of this flaw as Important.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-71556"
},
{
"category": "external",
"summary": "RHBZ#2512562",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2512562"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-71556",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71556"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-71556",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-71556"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-git/commit/008a78f2dd86f52544ddff8b8e8ddeecdf3f7aab",
"url": "https://github.com/go-git/go-git/commit/008a78f2dd86f52544ddff8b8e8ddeecdf3f7aab"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-git/commit/661d1c7f101d34e002a3cfcf8dbea5b7421d07ac",
"url": "https://github.com/go-git/go-git/commit/661d1c7f101d34e002a3cfcf8dbea5b7421d07ac"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-git/releases/tag/v5.19.2",
"url": "https://github.com/go-git/go-git/releases/tag/v5.19.2"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-git/releases/tag/v6.0.0-alpha.5",
"url": "https://github.com/go-git/go-git/releases/tag/v6.0.0-alpha.5"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-git/security/advisories/GHSA-hc8v-wwc9-vgxm",
"url": "https://github.com/go-git/go-git/security/advisories/GHSA-hc8v-wwc9-vgxm"
}
],
"release_date": "2026-08-07T16:37:40.058000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-22T09:13:07+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.8.z upgrade to 1.8.2",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69945"
},
{
"category": "workaround",
"details": "To reduce the risk of exploitation, do not clone or run worktree operations (checkout, status, add) on Git repositories originating from untrusted or attacker-controllable sources using an affected version of go-git. The issue is resolved by updating to go-git 5.19.2 or 6.0.0-alpha.5 (or later).",
"product_ids": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:0b79371fc4b8aa5c102721f4eab4844b387a8588a1a9251b97399c02c8cd6913_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:47ca1b9c64d67fdb1349e1e0441073b92bf96c8360d7fbb582e0ab895614bd9d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b868303e6b11ec72513f040a7283b683b71a8dd21b4cd755bee5b525ad0f73aa_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:daac50379d3b9ade972316b1c5beaf88b7854b0406f992eda34e61e25621d477_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:3184a6c724648b2cf0f16633843893dc14a701322d3cd07da9bca1d44db4bea8_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:69476b98ad47fd46ee9e8e4dcb675cfdfd690741d4a300f56212eb69f38e04ed_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cc47b40aa9fff307345e43aa8feab3b784399f8e0c6ef524a24aa48cb610786f_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:dd8b319ca717f4e6ef937eda90224ca49ae719c1542b5ea4d6ecc3e962691699_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:332ae7ff62506e996d43c2025ccd97cfd248894e8e6820d048f0dbe846049b53_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:39ef60f276f42488c3dd4ab82ce77b05dcbcad6a7f762ac334fd9a817c73a6d2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:9a99e5b253cbe27a0cb224146384d1eb2389e12105e2dce6d47a247ba1d96e1d_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:deea4876a35572800aaa040d9d8a1a561e83db1308a3e06919a18b705a4b5230_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:56c6d824f7882e3919e0f64cb588e29a6e2e2e362960093aa78e4340963409c2_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:b4ad4464947343e70d2797cffcde5a24750418e0a1246db4d3a27e527e9247e5_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c98e45ded58bc8b76be0bb00067618430680674711a2bcd85c928da03930e2c2_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:fa1b6cf4773e0b89379e6197b8de7bce62f645a1f8cb0363415b15e9d11b97b6_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:f10ea49c62ae90ab5e50603805525d56dd05a2756f1f3ef7047b10e848334c33_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b570f9d820c67fc3e288f22447bce4c267b3079661004a5cb07589aad6168c1f_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:dadcc914df9cacb66d49c1997d949de8dac40b0e7262226f0331091556f7cdc9_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ead23921e08bd601433da316d909d32488ff52bb50a0e4edcf446573c5b4edfe_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:eb7ec783d4d417b5bf5f401c12bc0fe12ca1888c87c966dd590432c4415e0a03_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:3e6c8363bcf9c7ac870fb122bee0ab51ab6534fa6ec73a72679e472108fd3baf_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:49c9189a03b7c65c28ba6786584a5c8e71e32c94363bfff4752d6f775443e304_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:87af96ae285b0973f1b11557a72a15b948ea27cef60c7b6f75a94cf7539f9cc7_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f0482177e9624d86644c846ac496b03960f05ab0893e78276bf9a20ba2c8ce78_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:47437484b971236485be70004fb0b11e6f6b16b3de7558dde72e453566c5ccfd_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:52e1c0911dcbcb415ec30aba209b5cdf8571e04633b7a7d17852c2d2549f0915_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:66fd4518b5143efc1240c33a42379d661fcd836ef770fdfa99691a91ca89ecbb_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d4efe63ca37bb0cf590cab527050b17aeb3799e250a0857ff6ef17f1ba72ea62_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:26426edb958e8ba709b92c56038639759f8076857d1ef61bf6c66c977401efc6_ppc64le",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:6e3c75d9da6b4b3bb2c5a2dc1c846de209dd2f707d7b26763b231ac3ae26764e_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:de16f8b4812dc8cc924078b9826442935fcfe6a980f6e898a709e4400a7b7040_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:fbfe2d3080bd686e7375c50dd5c546ab52b7024c8682e97406763f5ed5c1cf52_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0bf350dd085cc1bef84a5717fdc0daeefc4eef9c105bf9f6e0945a5cfe774dd8_arm64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6598f256f79ed8c21cd9cea4f8aa4336d06a83aa1131dc28e4c028a05080792d_amd64",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:77a755b2c46308a5b3a588ac2cc8f63d7ad83e47d93cfd8b6ee4062196f37bd3_s390x",
"Red Hat OpenShift Builds 1.8.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9d2e64ab0062f0f5d33444e3b89351f81c7690cf2fb04afebcbeac25ad5f4b00_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-git/go-git/v5: go-git: Arbitrary file read/write via symbolic link resolution"
}
]
}