cve-2025-14017
MEDIUM CVSS 4.8 csaf_redhat
Description
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Timeline
- Published
- 2025-01-01 00:00 UTC
- Last Modified
- 2026-09-01
CVSS Details
CVSS details not available.
Affected Products
No product information available.
Weaknesses (CWE)
References
No references available.
Linked Vulnerabilities
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_vex",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright © Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-14017.json"
}
],
"title": "curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers",
"tracking": {
"current_release_date": "2026-09-01T11:52:26+00:00",
"generator": {
"date": "2026-09-01T11:52:26+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "CVE-2025-14017",
"initial_release_date": "2025-01-01T00:00:00+00:00",
"revision_history": [
{
"date": "2025-01-01T00:00:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-01T10:43:35+00:00",
"number": "2",
"summary": "Current version"
},
{
"date": "2026-09-01T11:52:26+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Confidential Compute Attestation",
"product": {
"name": "Confidential Compute Attestation",
"product_id": "confidential_compute_attestation",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:confidential_compute_attestation:1"
}
}
}
],
"category": "product_family",
"name": "Confidential Compute Attestation"
},
{
"branches": [
{
"category": "product_name",
"name": "Logging Subsystem for Red Hat OpenShift",
"product": {
"name": "Logging Subsystem for Red Hat OpenShift",
"product_id": "logging_subsystem_for_red_hat_openshift",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:logging:5"
}
}
}
],
"category": "product_family",
"name": "Logging Subsystem for Red Hat OpenShift"
},
{
"branches": [
{
"category": "product_name",
"name": "OpenShift Service Mesh 2",
"product": {
"name": "OpenShift Service Mesh 2",
"product_id": "openshift_service_mesh_2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:service_mesh:2"
}
}
}
],
"category": "product_family",
"name": "OpenShift Service Mesh 2"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux 10",
"product": {
"name": "Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux 10"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux 6",
"product": {
"name": "Red Hat Enterprise Linux 6",
"product_id": "red_hat_enterprise_linux_6",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux 6"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux 7",
"product": {
"name": "Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux 7"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux 8",
"product": {
"name": "Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux 8"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux 9",
"product": {
"name": "Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux 9"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Core Services",
"product": {
"name": "Red Hat JBoss Core Services",
"product_id": "red_hat_jboss_core_services",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_core_services:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Core Services"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Container Platform 4",
"product": {
"name": "Red Hat OpenShift Container Platform 4",
"product_id": "red_hat_openshift_container_platform_4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:4"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Container Platform 4"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Dev Spaces",
"product": {
"name": "Red Hat OpenShift Dev Spaces",
"product_id": "red_hat_openshift_dev_spaces",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_devspaces:3"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Dev Spaces"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Trusted Profile Analyzer",
"product": {
"name": "Red Hat Trusted Profile Analyzer",
"product_id": "red_hat_trusted_profile_analyzer",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:trusted_profile_analyzer:2"
}
}
}
],
"category": "product_family",
"name": "Red Hat Trusted Profile Analyzer"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Hardened Images",
"product": {
"name": "Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:hummingbird:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Hardened Images"
},
{
"category": "product_version",
"name": "build-of-trustee/trustee-rhel9",
"product": {
"name": "build-of-trustee/trustee-rhel9",
"product_id": "build-of-trustee/trustee-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/trustee-rhel9?repository_url=registry.redhat.io/build-of-trustee/trustee-rhel9"
}
}
},
{
"category": "product_version",
"name": "confidential-compute-attestation-tech-preview/trustee-rhel9",
"product": {
"name": "confidential-compute-attestation-tech-preview/trustee-rhel9",
"product_id": "confidential-compute-attestation-tech-preview/trustee-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/trustee-rhel9?repository_url=registry.redhat.io/confidential-compute-attestation-tech-preview/trustee-rhel9"
}
}
},
{
"category": "product_version",
"name": "openshift-sandboxed-containers/osc-operator-bundle",
"product": {
"name": "openshift-sandboxed-containers/osc-operator-bundle",
"product_id": "openshift-sandboxed-containers/osc-operator-bundle",
"product_identification_helper": {
"purl": "pkg:oci/osc-operator-bundle?repository_url=registry.redhat.io/openshift-sandboxed-containers/osc-operator-bundle"
}
}
},
{
"category": "product_version",
"name": "openshift-sandboxed-containers/osc-podvm-builder-rhel9",
"product": {
"name": "openshift-sandboxed-containers/osc-podvm-builder-rhel9",
"product_id": "openshift-sandboxed-containers/osc-podvm-builder-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/osc-podvm-builder-rhel9?repository_url=registry.redhat.io/openshift-sandboxed-containers/osc-podvm-builder-rhel9"
}
}
},
{
"category": "product_version",
"name": "openshift-sandboxed-containers/osc-podvm-payload-rhel9",
"product": {
"name": "openshift-sandboxed-containers/osc-podvm-payload-rhel9",
"product_id": "openshift-sandboxed-containers/osc-podvm-payload-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/osc-podvm-payload-rhel9?repository_url=registry.redhat.io/openshift-sandboxed-containers/osc-podvm-payload-rhel9"
}
}
},
{
"category": "product_version",
"name": "openshift-sandboxed-containers/osc-rhel9-operator",
"product": {
"name": "openshift-sandboxed-containers/osc-rhel9-operator",
"product_id": "openshift-sandboxed-containers/osc-rhel9-operator",
"product_identification_helper": {
"purl": "pkg:oci/osc-rhel9-operator?repository_url=registry.redhat.io/openshift-sandboxed-containers/osc-rhel9-operator"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/cluster-logging-operator-bundle",
"product": {
"name": "openshift-logging/cluster-logging-operator-bundle",
"product_id": "openshift-logging/cluster-logging-operator-bundle",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-operator-bundle?repository_url=registry.redhat.io/openshift-logging/cluster-logging-operator-bundle"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/cluster-logging-rhel9-operator",
"product": {
"name": "openshift-logging/cluster-logging-rhel9-operator",
"product_id": "openshift-logging/cluster-logging-rhel9-operator",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator?repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/eventrouter-rhel9",
"product": {
"name": "openshift-logging/eventrouter-rhel9",
"product_id": "openshift-logging/eventrouter-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9?repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/fluentd-rhel9",
"product": {
"name": "openshift-logging/fluentd-rhel9",
"product_id": "openshift-logging/fluentd-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/fluentd-rhel9?repository_url=registry.redhat.io/openshift-logging/fluentd-rhel9"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/log-file-metric-exporter-rhel9",
"product": {
"name": "openshift-logging/log-file-metric-exporter-rhel9",
"product_id": "openshift-logging/log-file-metric-exporter-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9?repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/logging-view-plugin-rhel9",
"product": {
"name": "openshift-logging/logging-view-plugin-rhel9",
"product_id": "openshift-logging/logging-view-plugin-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/logging-view-plugin-rhel9?repository_url=registry.redhat.io/openshift-logging/logging-view-plugin-rhel9"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/vector-rhel9",
"product": {
"name": "openshift-logging/vector-rhel9",
"product_id": "openshift-logging/vector-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9?repository_url=registry.redhat.io/openshift-logging/vector-rhel9"
}
}
},
{
"category": "product_version",
"name": "openshift-service-mesh/grafana-rhel8",
"product": {
"name": "openshift-service-mesh/grafana-rhel8",
"product_id": "openshift-service-mesh/grafana-rhel8",
"product_identification_helper": {
"purl": "pkg:oci/grafana-rhel8?repository_url=registry.redhat.io/openshift-service-mesh/grafana-rhel8"
}
}
},
{
"category": "product_version",
"name": "openshift-service-mesh/istio-cni-rhel8",
"product": {
"name": "openshift-service-mesh/istio-cni-rhel8",
"product_id": "openshift-service-mesh/istio-cni-rhel8",
"product_identification_helper": {
"purl": "pkg:oci/istio-cni-rhel8?repository_url=registry.redhat.io/openshift-service-mesh/istio-cni-rhel8"
}
}
},
{
"category": "product_version",
"name": "openshift-service-mesh/istio-must-gather-rhel9",
"product": {
"name": "openshift-service-mesh/istio-must-gather-rhel9",
"product_id": "openshift-service-mesh/istio-must-gather-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/istio-must-gather-rhel9?repository_url=registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9"
}
}
},
{
"category": "product_version",
"name": "openshift-service-mesh/istio-operator-bundle",
"product": {
"name": "openshift-service-mesh/istio-operator-bundle",
"product_id": "openshift-service-mesh/istio-operator-bundle",
"product_identification_helper": {
"purl": "pkg:oci/istio-operator-bundle?repository_url=registry.redhat.io/openshift-service-mesh/istio-operator-bundle"
}
}
},
{
"category": "product_version",
"name": "openshift-service-mesh/istio-rhel8-operator",
"product": {
"name": "openshift-service-mesh/istio-rhel8-operator",
"product_id": "openshift-service-mesh/istio-rhel8-operator",
"product_identification_helper": {
"purl": "pkg:oci/istio-rhel8-operator?repository_url=registry.redhat.io/openshift-service-mesh/istio-rhel8-operator"
}
}
},
{
"category": "product_version",
"name": "openshift-service-mesh/pilot-rhel8",
"product": {
"name": "openshift-service-mesh/pilot-rhel8",
"product_id": "openshift-service-mesh/pilot-rhel8",
"product_identification_helper": {
"purl": "pkg:oci/pilot-rhel8?repository_url=registry.redhat.io/openshift-service-mesh/pilot-rhel8"
}
}
},
{
"category": "product_version",
"name": "openshift-service-mesh/proxyv2-rhel9",
"product": {
"name": "openshift-service-mesh/proxyv2-rhel9",
"product_id": "openshift-service-mesh/proxyv2-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/proxyv2-rhel9?repository_url=registry.redhat.io/openshift-service-mesh/proxyv2-rhel9"
}
}
},
{
"category": "product_version",
"name": "openshift-service-mesh/ratelimit-rhel8",
"product": {
"name": "openshift-service-mesh/ratelimit-rhel8",
"product_id": "openshift-service-mesh/ratelimit-rhel8",
"product_identification_helper": {
"purl": "pkg:oci/ratelimit-rhel8?repository_url=registry.redhat.io/openshift-service-mesh/ratelimit-rhel8"
}
}
},
{
"category": "product_version",
"name": "libcurl-minimal",
"product": {
"name": "libcurl-minimal",
"product_id": "libcurl-minimal",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-minimal"
}
}
},
{
"category": "product_version",
"name": "libcurl-devel",
"product": {
"name": "libcurl-devel",
"product_id": "libcurl-devel",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-devel"
}
}
},
{
"category": "product_version",
"name": "curl",
"product": {
"name": "curl",
"product_id": "curl",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl"
}
}
},
{
"category": "product_version",
"name": "libcurl",
"product": {
"name": "libcurl",
"product_id": "libcurl",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl"
}
}
},
{
"category": "product_version",
"name": "curl.src",
"product": {
"name": "curl.src",
"product_id": "curl.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl?arch=src"
}
}
},
{
"category": "product_version",
"name": "rust-std-static-wasm32-wasip1",
"product": {
"name": "rust-std-static-wasm32-wasip1",
"product_id": "rust-std-static-wasm32-wasip1",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-std-static-wasm32-wasip1"
}
}
},
{
"category": "product_version",
"name": "rustfmt",
"product": {
"name": "rustfmt",
"product_id": "rustfmt",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rustfmt"
}
}
},
{
"category": "product_version",
"name": "rust-lldb",
"product": {
"name": "rust-lldb",
"product_id": "rust-lldb",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-lldb"
}
}
},
{
"category": "product_version",
"name": "rust-debugger-common",
"product": {
"name": "rust-debugger-common",
"product_id": "rust-debugger-common",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-debugger-common"
}
}
},
{
"category": "product_version",
"name": "rust-analyzer",
"product": {
"name": "rust-analyzer",
"product_id": "rust-analyzer",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-analyzer"
}
}
},
{
"category": "product_version",
"name": "clippy",
"product": {
"name": "clippy",
"product_id": "clippy",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/clippy"
}
}
},
{
"category": "product_version",
"name": "rust-doc",
"product": {
"name": "rust-doc",
"product_id": "rust-doc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-doc"
}
}
},
{
"category": "product_version",
"name": "rust-gdb",
"product": {
"name": "rust-gdb",
"product_id": "rust-gdb",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-gdb"
}
}
},
{
"category": "product_version",
"name": "rust-src",
"product": {
"name": "rust-src",
"product_id": "rust-src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-src"
}
}
},
{
"category": "product_version",
"name": "rust-std-static-x86_64-unknown-none",
"product": {
"name": "rust-std-static-x86_64-unknown-none",
"product_id": "rust-std-static-x86_64-unknown-none",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-std-static-x86_64-unknown-none"
}
}
},
{
"category": "product_version",
"name": "rust-std-static",
"product": {
"name": "rust-std-static",
"product_id": "rust-std-static",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-std-static"
}
}
},
{
"category": "product_version",
"name": "rust-std-static-aarch64-unknown-none-softfloat",
"product": {
"name": "rust-std-static-aarch64-unknown-none-softfloat",
"product_id": "rust-std-static-aarch64-unknown-none-softfloat",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-std-static-aarch64-unknown-none-softfloat"
}
}
},
{
"category": "product_version",
"name": "rust-toolset",
"product": {
"name": "rust-toolset",
"product_id": "rust-toolset",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-toolset"
}
}
},
{
"category": "product_version",
"name": "cargo",
"product": {
"name": "cargo",
"product_id": "cargo",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cargo"
}
}
},
{
"category": "product_version",
"name": "rust-toolset-srpm-macros",
"product": {
"name": "rust-toolset-srpm-macros",
"product_id": "rust-toolset-srpm-macros",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-toolset-srpm-macros"
}
}
},
{
"category": "product_version",
"name": "rust-std-static-wasm32-unknown-unknown",
"product": {
"name": "rust-std-static-wasm32-unknown-unknown",
"product_id": "rust-std-static-wasm32-unknown-unknown",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-std-static-wasm32-unknown-unknown"
}
}
},
{
"category": "product_version",
"name": "rust.src",
"product": {
"name": "rust.src",
"product_id": "rust.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust?arch=src"
}
}
},
{
"category": "product_version",
"name": "s390utils-core",
"product": {
"name": "s390utils-core",
"product_id": "s390utils-core",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-core"
}
}
},
{
"category": "product_version",
"name": "s390utils-base",
"product": {
"name": "s390utils-base",
"product_id": "s390utils-base",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-base"
}
}
},
{
"category": "product_version",
"name": "s390utils-cpuplugd",
"product": {
"name": "s390utils-cpuplugd",
"product_id": "s390utils-cpuplugd",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-cpuplugd"
}
}
},
{
"category": "product_version",
"name": "s390utils-se-data",
"product": {
"name": "s390utils-se-data",
"product_id": "s390utils-se-data",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-se-data"
}
}
},
{
"category": "product_version",
"name": "s390utils-iucvterm",
"product": {
"name": "s390utils-iucvterm",
"product_id": "s390utils-iucvterm",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-iucvterm"
}
}
},
{
"category": "product_version",
"name": "s390utils-devel",
"product": {
"name": "s390utils-devel",
"product_id": "s390utils-devel",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-devel"
}
}
},
{
"category": "product_version",
"name": "s390utils-mon_statd",
"product": {
"name": "s390utils-mon_statd",
"product_id": "s390utils-mon_statd",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-mon_statd"
}
}
},
{
"category": "product_version",
"name": "s390utils-cpacfstatsd",
"product": {
"name": "s390utils-cpacfstatsd",
"product_id": "s390utils-cpacfstatsd",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-cpacfstatsd"
}
}
},
{
"category": "product_version",
"name": "s390utils.src",
"product": {
"name": "s390utils.src",
"product_id": "s390utils.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils?arch=src"
}
}
},
{
"category": "product_version",
"name": "s390utils-chreipl-fcp-mpath",
"product": {
"name": "s390utils-chreipl-fcp-mpath",
"product_id": "s390utils-chreipl-fcp-mpath",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-chreipl-fcp-mpath"
}
}
},
{
"category": "product_version",
"name": "s390utils-zdsfs",
"product": {
"name": "s390utils-zdsfs",
"product_id": "s390utils-zdsfs",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-zdsfs"
}
}
},
{
"category": "product_version",
"name": "s390utils-hmcdrvfs",
"product": {
"name": "s390utils-hmcdrvfs",
"product_id": "s390utils-hmcdrvfs",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-hmcdrvfs"
}
}
},
{
"category": "product_version",
"name": "s390utils-cmsfs-fuse",
"product": {
"name": "s390utils-cmsfs-fuse",
"product_id": "s390utils-cmsfs-fuse",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-cmsfs-fuse"
}
}
},
{
"category": "product_version",
"name": "s390utils-osasnmpd",
"product": {
"name": "s390utils-osasnmpd",
"product_id": "s390utils-osasnmpd",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-osasnmpd"
}
}
},
{
"category": "product_version",
"name": "s390utils-ziomon",
"product": {
"name": "s390utils-ziomon",
"product_id": "s390utils-ziomon",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-ziomon"
}
}
},
{
"category": "product_version",
"name": "snphost.src",
"product": {
"name": "snphost.src",
"product_id": "snphost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/snphost?arch=src"
}
}
},
{
"category": "product_version",
"name": "trustee-guest-components.src",
"product": {
"name": "trustee-guest-components.src",
"product_id": "trustee-guest-components.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/trustee-guest-components?arch=src"
}
}
},
{
"category": "product_version",
"name": "curl-minimal",
"product": {
"name": "curl-minimal",
"product_id": "curl-minimal",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl-minimal"
}
}
},
{
"category": "product_version",
"name": "rust-std-static-wasm32-wasi",
"product": {
"name": "rust-std-static-wasm32-wasi",
"product_id": "rust-std-static-wasm32-wasi",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-std-static-wasm32-wasi"
}
}
},
{
"category": "product_version",
"name": "rust",
"product": {
"name": "rust",
"product_id": "rust",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust"
}
}
},
{
"category": "product_version",
"name": "rust-analysis",
"product": {
"name": "rust-analysis",
"product_id": "rust-analysis",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-analysis"
}
}
},
{
"category": "product_version",
"name": "openshift4/recert-rhel9",
"product": {
"name": "openshift4/recert-rhel9",
"product_id": "openshift4/recert-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/recert-rhel9?repository_url=registry.redhat.io/openshift4/recert-rhel9"
}
}
},
{
"category": "product_version",
"name": "openshift/ose-rhel-coreos-8",
"product": {
"name": "openshift/ose-rhel-coreos-8",
"product_id": "openshift/ose-rhel-coreos-8",
"product_identification_helper": {
"purl": "pkg:oci/ose-rhel-coreos-8?repository_url=registry.redhat.io/openshift/ose-rhel-coreos-8"
}
}
},
{
"category": "product_version",
"name": "openshift/ose-rhel-coreos-9",
"product": {
"name": "openshift/ose-rhel-coreos-9",
"product_id": "openshift/ose-rhel-coreos-9",
"product_identification_helper": {
"purl": "pkg:oci/ose-rhel-coreos-9?repository_url=registry.redhat.io/openshift/ose-rhel-coreos-9"
}
}
},
{
"category": "product_version",
"name": "devspaces/code-rhel9",
"product": {
"name": "devspaces/code-rhel9",
"product_id": "devspaces/code-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/code-rhel9?repository_url=registry.redhat.io/devspaces/code-rhel9"
}
}
},
{
"category": "product_version",
"name": "rhtpa/rhtpa-trustification-service-rhel9",
"product": {
"name": "rhtpa/rhtpa-trustification-service-rhel9",
"product_id": "rhtpa/rhtpa-trustification-service-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/rhtpa-trustification-service-rhel9?repository_url=registry.redhat.io/rhtpa/rhtpa-trustification-service-rhel9"
}
}
},
{
"branches": [
{
"category": "product_version",
"name": "curl-main@aarch64",
"product": {
"name": "curl-main@aarch64",
"product_id": "curl-main@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl@8.19.0-3.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "curl-main@src",
"product": {
"name": "curl-main@src",
"product_id": "curl-main@src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl@8.19.0-3.hum1?arch=source&distro=hummingbird-20251124&repository_id=public-hummingbird-source-rpms"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "curl-main@x86_64",
"product": {
"name": "curl-main@x86_64",
"product_id": "curl-main@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl@8.19.0-3.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-main@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:curl-main@aarch64"
},
"product_reference": "curl-main@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-main@src as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:curl-main@src"
},
"product_reference": "curl-main@src",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-main@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:curl-main@x86_64"
},
"product_reference": "curl-main@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "build-of-trustee/trustee-rhel9 as a component of Confidential Compute Attestation",
"product_id": "confidential_compute_attestation:build-of-trustee/trustee-rhel9"
},
"product_reference": "build-of-trustee/trustee-rhel9",
"relates_to_product_reference": "confidential_compute_attestation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "confidential-compute-attestation-tech-preview/trustee-rhel9 as a component of Confidential Compute Attestation",
"product_id": "confidential_compute_attestation:confidential-compute-attestation-tech-preview/trustee-rhel9"
},
"product_reference": "confidential-compute-attestation-tech-preview/trustee-rhel9",
"relates_to_product_reference": "confidential_compute_attestation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-sandboxed-containers/osc-operator-bundle as a component of Confidential Compute Attestation",
"product_id": "confidential_compute_attestation:openshift-sandboxed-containers/osc-operator-bundle"
},
"product_reference": "openshift-sandboxed-containers/osc-operator-bundle",
"relates_to_product_reference": "confidential_compute_attestation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-sandboxed-containers/osc-podvm-builder-rhel9 as a component of Confidential Compute Attestation",
"product_id": "confidential_compute_attestation:openshift-sandboxed-containers/osc-podvm-builder-rhel9"
},
"product_reference": "openshift-sandboxed-containers/osc-podvm-builder-rhel9",
"relates_to_product_reference": "confidential_compute_attestation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-sandboxed-containers/osc-podvm-payload-rhel9 as a component of Confidential Compute Attestation",
"product_id": "confidential_compute_attestation:openshift-sandboxed-containers/osc-podvm-payload-rhel9"
},
"product_reference": "openshift-sandboxed-containers/osc-podvm-payload-rhel9",
"relates_to_product_reference": "confidential_compute_attestation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-sandboxed-containers/osc-rhel9-operator as a component of Confidential Compute Attestation",
"product_id": "confidential_compute_attestation:openshift-sandboxed-containers/osc-rhel9-operator"
},
"product_reference": "openshift-sandboxed-containers/osc-rhel9-operator",
"relates_to_product_reference": "confidential_compute_attestation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/cluster-logging-operator-bundle as a component of Logging Subsystem for Red Hat OpenShift",
"product_id": "logging_subsystem_for_red_hat_openshift:openshift-logging/cluster-logging-operator-bundle"
},
"product_reference": "openshift-logging/cluster-logging-operator-bundle",
"relates_to_product_reference": "logging_subsystem_for_red_hat_openshift"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/cluster-logging-rhel9-operator as a component of Logging Subsystem for Red Hat OpenShift",
"product_id": "logging_subsystem_for_red_hat_openshift:openshift-logging/cluster-logging-rhel9-operator"
},
"product_reference": "openshift-logging/cluster-logging-rhel9-operator",
"relates_to_product_reference": "logging_subsystem_for_red_hat_openshift"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/eventrouter-rhel9 as a component of Logging Subsystem for Red Hat OpenShift",
"product_id": "logging_subsystem_for_red_hat_openshift:openshift-logging/eventrouter-rhel9"
},
"product_reference": "openshift-logging/eventrouter-rhel9",
"relates_to_product_reference": "logging_subsystem_for_red_hat_openshift"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/fluentd-rhel9 as a component of Logging Subsystem for Red Hat OpenShift",
"product_id": "logging_subsystem_for_red_hat_openshift:openshift-logging/fluentd-rhel9"
},
"product_reference": "openshift-logging/fluentd-rhel9",
"relates_to_product_reference": "logging_subsystem_for_red_hat_openshift"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/log-file-metric-exporter-rhel9 as a component of Logging Subsystem for Red Hat OpenShift",
"product_id": "logging_subsystem_for_red_hat_openshift:openshift-logging/log-file-metric-exporter-rhel9"
},
"product_reference": "openshift-logging/log-file-metric-exporter-rhel9",
"relates_to_product_reference": "logging_subsystem_for_red_hat_openshift"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/logging-view-plugin-rhel9 as a component of Logging Subsystem for Red Hat OpenShift",
"product_id": "logging_subsystem_for_red_hat_openshift:openshift-logging/logging-view-plugin-rhel9"
},
"product_reference": "openshift-logging/logging-view-plugin-rhel9",
"relates_to_product_reference": "logging_subsystem_for_red_hat_openshift"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/vector-rhel9 as a component of Logging Subsystem for Red Hat OpenShift",
"product_id": "logging_subsystem_for_red_hat_openshift:openshift-logging/vector-rhel9"
},
"product_reference": "openshift-logging/vector-rhel9",
"relates_to_product_reference": "logging_subsystem_for_red_hat_openshift"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-service-mesh/grafana-rhel8 as a component of OpenShift Service Mesh 2",
"product_id": "openshift_service_mesh_2:openshift-service-mesh/grafana-rhel8"
},
"product_reference": "openshift-service-mesh/grafana-rhel8",
"relates_to_product_reference": "openshift_service_mesh_2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-service-mesh/istio-cni-rhel8 as a component of OpenShift Service Mesh 2",
"product_id": "openshift_service_mesh_2:openshift-service-mesh/istio-cni-rhel8"
},
"product_reference": "openshift-service-mesh/istio-cni-rhel8",
"relates_to_product_reference": "openshift_service_mesh_2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-service-mesh/istio-must-gather-rhel9 as a component of OpenShift Service Mesh 2",
"product_id": "openshift_service_mesh_2:openshift-service-mesh/istio-must-gather-rhel9"
},
"product_reference": "openshift-service-mesh/istio-must-gather-rhel9",
"relates_to_product_reference": "openshift_service_mesh_2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-service-mesh/istio-operator-bundle as a component of OpenShift Service Mesh 2",
"product_id": "openshift_service_mesh_2:openshift-service-mesh/istio-operator-bundle"
},
"product_reference": "openshift-service-mesh/istio-operator-bundle",
"relates_to_product_reference": "openshift_service_mesh_2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-service-mesh/istio-rhel8-operator as a component of OpenShift Service Mesh 2",
"product_id": "openshift_service_mesh_2:openshift-service-mesh/istio-rhel8-operator"
},
"product_reference": "openshift-service-mesh/istio-rhel8-operator",
"relates_to_product_reference": "openshift_service_mesh_2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-service-mesh/pilot-rhel8 as a component of OpenShift Service Mesh 2",
"product_id": "openshift_service_mesh_2:openshift-service-mesh/pilot-rhel8"
},
"product_reference": "openshift-service-mesh/pilot-rhel8",
"relates_to_product_reference": "openshift_service_mesh_2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-service-mesh/proxyv2-rhel9 as a component of OpenShift Service Mesh 2",
"product_id": "openshift_service_mesh_2:openshift-service-mesh/proxyv2-rhel9"
},
"product_reference": "openshift-service-mesh/proxyv2-rhel9",
"relates_to_product_reference": "openshift_service_mesh_2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-service-mesh/ratelimit-rhel8 as a component of OpenShift Service Mesh 2",
"product_id": "openshift_service_mesh_2:openshift-service-mesh/ratelimit-rhel8"
},
"product_reference": "openshift-service-mesh/ratelimit-rhel8",
"relates_to_product_reference": "openshift_service_mesh_2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:cargo"
},
"product_reference": "cargo",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clippy as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:clippy"
},
"product_reference": "clippy",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:curl"
},
"product_reference": "curl",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl.src as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:curl.src"
},
"product_reference": "curl.src",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:libcurl"
},
"product_reference": "libcurl",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:libcurl-devel"
},
"product_reference": "libcurl-devel",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-minimal as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:libcurl-minimal"
},
"product_reference": "libcurl-minimal",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-analyzer as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-analyzer"
},
"product_reference": "rust-analyzer",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-debugger-common as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-debugger-common"
},
"product_reference": "rust-debugger-common",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-doc as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-doc"
},
"product_reference": "rust-doc",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-gdb as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-gdb"
},
"product_reference": "rust-gdb",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-lldb as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-lldb"
},
"product_reference": "rust-lldb",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-src as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-src"
},
"product_reference": "rust-src",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-std-static"
},
"product_reference": "rust-std-static",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-aarch64-unknown-none-softfloat as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-std-static-aarch64-unknown-none-softfloat"
},
"product_reference": "rust-std-static-aarch64-unknown-none-softfloat",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-wasm32-unknown-unknown as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-std-static-wasm32-unknown-unknown"
},
"product_reference": "rust-std-static-wasm32-unknown-unknown",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-wasm32-wasip1 as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-std-static-wasm32-wasip1"
},
"product_reference": "rust-std-static-wasm32-wasip1",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-x86_64-unknown-none as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-std-static-x86_64-unknown-none"
},
"product_reference": "rust-std-static-x86_64-unknown-none",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-toolset as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-toolset"
},
"product_reference": "rust-toolset",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-toolset-srpm-macros as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-toolset-srpm-macros"
},
"product_reference": "rust-toolset-srpm-macros",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust.src as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust.src"
},
"product_reference": "rust.src",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rustfmt as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rustfmt"
},
"product_reference": "rustfmt",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-base as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-base"
},
"product_reference": "s390utils-base",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-chreipl-fcp-mpath as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-chreipl-fcp-mpath"
},
"product_reference": "s390utils-chreipl-fcp-mpath",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-cmsfs-fuse as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-cmsfs-fuse"
},
"product_reference": "s390utils-cmsfs-fuse",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-core as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-core"
},
"product_reference": "s390utils-core",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-cpacfstatsd as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-cpacfstatsd"
},
"product_reference": "s390utils-cpacfstatsd",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-cpuplugd as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-cpuplugd"
},
"product_reference": "s390utils-cpuplugd",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-devel as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-devel"
},
"product_reference": "s390utils-devel",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-hmcdrvfs as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-hmcdrvfs"
},
"product_reference": "s390utils-hmcdrvfs",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-iucvterm as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-iucvterm"
},
"product_reference": "s390utils-iucvterm",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-mon_statd as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-mon_statd"
},
"product_reference": "s390utils-mon_statd",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-osasnmpd as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-osasnmpd"
},
"product_reference": "s390utils-osasnmpd",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-se-data as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-se-data"
},
"product_reference": "s390utils-se-data",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-zdsfs as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-zdsfs"
},
"product_reference": "s390utils-zdsfs",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-ziomon as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-ziomon"
},
"product_reference": "s390utils-ziomon",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils.src as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils.src"
},
"product_reference": "s390utils.src",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "snphost.src as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:snphost.src"
},
"product_reference": "snphost.src",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trustee-guest-components.src as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:trustee-guest-components.src"
},
"product_reference": "trustee-guest-components.src",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl as a component of Red Hat Enterprise Linux 6",
"product_id": "red_hat_enterprise_linux_6:curl"
},
"product_reference": "curl",
"relates_to_product_reference": "red_hat_enterprise_linux_6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl.src as a component of Red Hat Enterprise Linux 6",
"product_id": "red_hat_enterprise_linux_6:curl.src"
},
"product_reference": "curl.src",
"relates_to_product_reference": "red_hat_enterprise_linux_6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl as a component of Red Hat Enterprise Linux 6",
"product_id": "red_hat_enterprise_linux_6:libcurl"
},
"product_reference": "libcurl",
"relates_to_product_reference": "red_hat_enterprise_linux_6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel as a component of Red Hat Enterprise Linux 6",
"product_id": "red_hat_enterprise_linux_6:libcurl-devel"
},
"product_reference": "libcurl-devel",
"relates_to_product_reference": "red_hat_enterprise_linux_6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:curl"
},
"product_reference": "curl",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl.src as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:curl.src"
},
"product_reference": "curl.src",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:libcurl"
},
"product_reference": "libcurl",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:libcurl-devel"
},
"product_reference": "libcurl-devel",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:curl"
},
"product_reference": "curl",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl.src as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:curl.src"
},
"product_reference": "curl.src",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:libcurl"
},
"product_reference": "libcurl",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:libcurl-devel"
},
"product_reference": "libcurl-devel",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-minimal as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:libcurl-minimal"
},
"product_reference": "libcurl-minimal",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:cargo"
},
"product_reference": "cargo",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clippy as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:clippy"
},
"product_reference": "clippy",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:curl"
},
"product_reference": "curl",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-minimal as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:curl-minimal"
},
"product_reference": "curl-minimal",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl.src as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:curl.src"
},
"product_reference": "curl.src",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:libcurl"
},
"product_reference": "libcurl",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:libcurl-devel"
},
"product_reference": "libcurl-devel",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-minimal as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:libcurl-minimal"
},
"product_reference": "libcurl-minimal",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust"
},
"product_reference": "rust",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-analysis as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust-analysis"
},
"product_reference": "rust-analysis",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-analyzer as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust-analyzer"
},
"product_reference": "rust-analyzer",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-debugger-common as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust-debugger-common"
},
"product_reference": "rust-debugger-common",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-doc as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust-doc"
},
"product_reference": "rust-doc",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-gdb as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust-gdb"
},
"product_reference": "rust-gdb",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-lldb as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust-lldb"
},
"product_reference": "rust-lldb",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-src as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust-src"
},
"product_reference": "rust-src",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust-std-static"
},
"product_reference": "rust-std-static",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-wasm32-unknown-unknown as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust-std-static-wasm32-unknown-unknown"
},
"product_reference": "rust-std-static-wasm32-unknown-unknown",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-wasm32-wasi as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust-std-static-wasm32-wasi"
},
"product_reference": "rust-std-static-wasm32-wasi",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-toolset as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust-toolset"
},
"product_reference": "rust-toolset",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust.src as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust.src"
},
"product_reference": "rust.src",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rustfmt as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rustfmt"
},
"product_reference": "rustfmt",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "snphost.src as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:snphost.src"
},
"product_reference": "snphost.src",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trustee-guest-components.src as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:trustee-guest-components.src"
},
"product_reference": "trustee-guest-components.src",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl as a component of Red Hat JBoss Core Services",
"product_id": "red_hat_jboss_core_services:curl"
},
"product_reference": "curl",
"relates_to_product_reference": "red_hat_jboss_core_services"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4",
"product_id": "red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-8"
},
"product_reference": "openshift/ose-rhel-coreos-8",
"relates_to_product_reference": "red_hat_openshift_container_platform_4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4",
"product_id": "red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-9"
},
"product_reference": "openshift/ose-rhel-coreos-9",
"relates_to_product_reference": "red_hat_openshift_container_platform_4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/recert-rhel9 as a component of Red Hat OpenShift Container Platform 4",
"product_id": "red_hat_openshift_container_platform_4:openshift4/recert-rhel9"
},
"product_reference": "openshift4/recert-rhel9",
"relates_to_product_reference": "red_hat_openshift_container_platform_4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "devspaces/code-rhel9 as a component of Red Hat OpenShift Dev Spaces",
"product_id": "red_hat_openshift_dev_spaces:devspaces/code-rhel9"
},
"product_reference": "devspaces/code-rhel9",
"relates_to_product_reference": "red_hat_openshift_dev_spaces"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhtpa/rhtpa-trustification-service-rhel9 as a component of Red Hat Trusted Profile Analyzer",
"product_id": "red_hat_trusted_profile_analyzer:rhtpa/rhtpa-trustification-service-rhel9"
},
"product_reference": "rhtpa/rhtpa-trustification-service-rhel9",
"relates_to_product_reference": "red_hat_trusted_profile_analyzer"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-14017",
"cwe": {
"id": "CWE-1058",
"name": "Invokable Control Element in Multi-Thread Context with non-Final Static Storable or Member Element"
},
"discovery_date": "2026-01-08T11:01:16.184214+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427870"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in curl. When performing multi-threaded LDAPS (Lightweight Directory Access Protocol Secure) transfers, changes to Transport Layer Security (TLS) options in one thread could inadvertently apply globally, affecting other concurrent transfers. This could lead to unintended security posture changes, such as disabling certificate verification for other threads. This vulnerability can result in a security bypass, where expected security checks are not performed.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Moderate for Red Hat. The flaw in curl affects multi-threaded LDAPS transfers where changes to TLS options in one thread could inadvertently apply globally, impacting other concurrent transfers. This could lead to a security bypass if an application relies on specific TLS settings that are then overridden. Impact is limited to applications utilizing libcurl for multi-threaded LDAPS connections that dynamically modify TLS options.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64"
],
"known_affected": [
"confidential_compute_attestation:build-of-trustee/trustee-rhel9",
"confidential_compute_attestation:confidential-compute-attestation-tech-preview/trustee-rhel9",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-operator-bundle",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-podvm-builder-rhel9",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-podvm-payload-rhel9",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-rhel9-operator",
"logging_subsystem_for_red_hat_openshift:openshift-logging/cluster-logging-operator-bundle",
"logging_subsystem_for_red_hat_openshift:openshift-logging/cluster-logging-rhel9-operator",
"logging_subsystem_for_red_hat_openshift:openshift-logging/eventrouter-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/fluentd-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/log-file-metric-exporter-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/logging-view-plugin-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/vector-rhel9",
"openshift_service_mesh_2:openshift-service-mesh/grafana-rhel8",
"openshift_service_mesh_2:openshift-service-mesh/istio-cni-rhel8",
"openshift_service_mesh_2:openshift-service-mesh/istio-must-gather-rhel9",
"openshift_service_mesh_2:openshift-service-mesh/istio-operator-bundle",
"openshift_service_mesh_2:openshift-service-mesh/istio-rhel8-operator",
"openshift_service_mesh_2:openshift-service-mesh/pilot-rhel8",
"openshift_service_mesh_2:openshift-service-mesh/proxyv2-rhel9",
"openshift_service_mesh_2:openshift-service-mesh/ratelimit-rhel8",
"red_hat_enterprise_linux_10:cargo",
"red_hat_enterprise_linux_10:clippy",
"red_hat_enterprise_linux_10:curl",
"red_hat_enterprise_linux_10:curl.src",
"red_hat_enterprise_linux_10:libcurl",
"red_hat_enterprise_linux_10:libcurl-devel",
"red_hat_enterprise_linux_10:libcurl-minimal",
"red_hat_enterprise_linux_10:rust-analyzer",
"red_hat_enterprise_linux_10:rust-debugger-common",
"red_hat_enterprise_linux_10:rust-doc",
"red_hat_enterprise_linux_10:rust-gdb",
"red_hat_enterprise_linux_10:rust-lldb",
"red_hat_enterprise_linux_10:rust-src",
"red_hat_enterprise_linux_10:rust-std-static",
"red_hat_enterprise_linux_10:rust-std-static-aarch64-unknown-none-softfloat",
"red_hat_enterprise_linux_10:rust-std-static-wasm32-unknown-unknown",
"red_hat_enterprise_linux_10:rust-std-static-wasm32-wasip1",
"red_hat_enterprise_linux_10:rust-std-static-x86_64-unknown-none",
"red_hat_enterprise_linux_10:rust-toolset",
"red_hat_enterprise_linux_10:rust-toolset-srpm-macros",
"red_hat_enterprise_linux_10:rust.src",
"red_hat_enterprise_linux_10:rustfmt",
"red_hat_enterprise_linux_10:s390utils-base",
"red_hat_enterprise_linux_10:s390utils-chreipl-fcp-mpath",
"red_hat_enterprise_linux_10:s390utils-cmsfs-fuse",
"red_hat_enterprise_linux_10:s390utils-core",
"red_hat_enterprise_linux_10:s390utils-cpacfstatsd",
"red_hat_enterprise_linux_10:s390utils-cpuplugd",
"red_hat_enterprise_linux_10:s390utils-devel",
"red_hat_enterprise_linux_10:s390utils-hmcdrvfs",
"red_hat_enterprise_linux_10:s390utils-iucvterm",
"red_hat_enterprise_linux_10:s390utils-mon_statd",
"red_hat_enterprise_linux_10:s390utils-osasnmpd",
"red_hat_enterprise_linux_10:s390utils-se-data",
"red_hat_enterprise_linux_10:s390utils-zdsfs",
"red_hat_enterprise_linux_10:s390utils-ziomon",
"red_hat_enterprise_linux_10:s390utils.src",
"red_hat_enterprise_linux_10:snphost.src",
"red_hat_enterprise_linux_10:trustee-guest-components.src",
"red_hat_enterprise_linux_6:curl",
"red_hat_enterprise_linux_6:curl.src",
"red_hat_enterprise_linux_6:libcurl",
"red_hat_enterprise_linux_6:libcurl-devel",
"red_hat_enterprise_linux_7:curl",
"red_hat_enterprise_linux_7:curl.src",
"red_hat_enterprise_linux_7:libcurl",
"red_hat_enterprise_linux_7:libcurl-devel",
"red_hat_enterprise_linux_8:curl",
"red_hat_enterprise_linux_8:curl.src",
"red_hat_enterprise_linux_8:libcurl",
"red_hat_enterprise_linux_8:libcurl-devel",
"red_hat_enterprise_linux_8:libcurl-minimal",
"red_hat_enterprise_linux_9:cargo",
"red_hat_enterprise_linux_9:clippy",
"red_hat_enterprise_linux_9:curl",
"red_hat_enterprise_linux_9:curl-minimal",
"red_hat_enterprise_linux_9:curl.src",
"red_hat_enterprise_linux_9:libcurl",
"red_hat_enterprise_linux_9:libcurl-devel",
"red_hat_enterprise_linux_9:libcurl-minimal",
"red_hat_enterprise_linux_9:rust",
"red_hat_enterprise_linux_9:rust-analysis",
"red_hat_enterprise_linux_9:rust-analyzer",
"red_hat_enterprise_linux_9:rust-debugger-common",
"red_hat_enterprise_linux_9:rust-doc",
"red_hat_enterprise_linux_9:rust-gdb",
"red_hat_enterprise_linux_9:rust-lldb",
"red_hat_enterprise_linux_9:rust-src",
"red_hat_enterprise_linux_9:rust-std-static",
"red_hat_enterprise_linux_9:rust-std-static-wasm32-unknown-unknown",
"red_hat_enterprise_linux_9:rust-std-static-wasm32-wasi",
"red_hat_enterprise_linux_9:rust-toolset",
"red_hat_enterprise_linux_9:rust.src",
"red_hat_enterprise_linux_9:rustfmt",
"red_hat_enterprise_linux_9:snphost.src",
"red_hat_enterprise_linux_9:trustee-guest-components.src",
"red_hat_jboss_core_services:curl",
"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-8",
"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-9",
"red_hat_openshift_container_platform_4:openshift4/recert-rhel9",
"red_hat_openshift_dev_spaces:devspaces/code-rhel9",
"red_hat_trusted_profile_analyzer:rhtpa/rhtpa-trustification-service-rhel9"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-14017"
},
{
"category": "external",
"summary": "RHBZ#2427870",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427870"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-14017",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14017"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-14017",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-14017"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2025-14017.html",
"url": "https://curl.se/docs/CVE-2025-14017.html"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2025-14017.json",
"url": "https://curl.se/docs/CVE-2025-14017.json"
}
],
"release_date": "2026-01-08T10:07:05.554000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-07T15:43:21+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64"
],
"url": "https://access.redhat.com/errata/RHSA-2026:6893"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64",
"confidential_compute_attestation:build-of-trustee/trustee-rhel9",
"confidential_compute_attestation:confidential-compute-attestation-tech-preview/trustee-rhel9",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-operator-bundle",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-podvm-builder-rhel9",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-podvm-payload-rhel9",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-rhel9-operator",
"logging_subsystem_for_red_hat_openshift:openshift-logging/cluster-logging-operator-bundle",
"logging_subsystem_for_red_hat_openshift:openshift-logging/cluster-logging-rhel9-operator",
"logging_subsystem_for_red_hat_openshift:openshift-logging/eventrouter-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/fluentd-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/log-file-metric-exporter-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/logging-view-plugin-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/vector-rhel9",
"openshift_service_mesh_2:openshift-service-mesh/grafana-rhel8",
"openshift_service_mesh_2:openshift-service-mesh/istio-cni-rhel8",
"openshift_service_mesh_2:openshift-service-mesh/istio-must-gather-rhel9",
"openshift_service_mesh_2:openshift-service-mesh/istio-operator-bundle",
"openshift_service_mesh_2:openshift-service-mesh/istio-rhel8-operator",
"openshift_service_mesh_2:openshift-service-mesh/pilot-rhel8",
"openshift_service_mesh_2:openshift-service-mesh/proxyv2-rhel9",
"openshift_service_mesh_2:openshift-service-mesh/ratelimit-rhel8",
"red_hat_enterprise_linux_10:cargo",
"red_hat_enterprise_linux_10:clippy",
"red_hat_enterprise_linux_10:curl",
"red_hat_enterprise_linux_10:curl.src",
"red_hat_enterprise_linux_10:libcurl",
"red_hat_enterprise_linux_10:libcurl-devel",
"red_hat_enterprise_linux_10:libcurl-minimal",
"red_hat_enterprise_linux_10:rust-analyzer",
"red_hat_enterprise_linux_10:rust-debugger-common",
"red_hat_enterprise_linux_10:rust-doc",
"red_hat_enterprise_linux_10:rust-gdb",
"red_hat_enterprise_linux_10:rust-lldb",
"red_hat_enterprise_linux_10:rust-src",
"red_hat_enterprise_linux_10:rust-std-static",
"red_hat_enterprise_linux_10:rust-std-static-aarch64-unknown-none-softfloat",
"red_hat_enterprise_linux_10:rust-std-static-wasm32-unknown-unknown",
"red_hat_enterprise_linux_10:rust-std-static-wasm32-wasip1",
"red_hat_enterprise_linux_10:rust-std-static-x86_64-unknown-none",
"red_hat_enterprise_linux_10:rust-toolset",
"red_hat_enterprise_linux_10:rust-toolset-srpm-macros",
"red_hat_enterprise_linux_10:rust.src",
"red_hat_enterprise_linux_10:rustfmt",
"red_hat_enterprise_linux_10:s390utils-base",
"red_hat_enterprise_linux_10:s390utils-chreipl-fcp-mpath",
"red_hat_enterprise_linux_10:s390utils-cmsfs-fuse",
"red_hat_enterprise_linux_10:s390utils-core",
"red_hat_enterprise_linux_10:s390utils-cpacfstatsd",
"red_hat_enterprise_linux_10:s390utils-cpuplugd",
"red_hat_enterprise_linux_10:s390utils-devel",
"red_hat_enterprise_linux_10:s390utils-hmcdrvfs",
"red_hat_enterprise_linux_10:s390utils-iucvterm",
"red_hat_enterprise_linux_10:s390utils-mon_statd",
"red_hat_enterprise_linux_10:s390utils-osasnmpd",
"red_hat_enterprise_linux_10:s390utils-se-data",
"red_hat_enterprise_linux_10:s390utils-zdsfs",
"red_hat_enterprise_linux_10:s390utils-ziomon",
"red_hat_enterprise_linux_10:s390utils.src",
"red_hat_enterprise_linux_10:snphost.src",
"red_hat_enterprise_linux_10:trustee-guest-components.src",
"red_hat_enterprise_linux_6:curl",
"red_hat_enterprise_linux_6:curl.src",
"red_hat_enterprise_linux_6:libcurl",
"red_hat_enterprise_linux_6:libcurl-devel",
"red_hat_enterprise_linux_7:curl",
"red_hat_enterprise_linux_7:curl.src",
"red_hat_enterprise_linux_7:libcurl",
"red_hat_enterprise_linux_7:libcurl-devel",
"red_hat_enterprise_linux_8:curl",
"red_hat_enterprise_linux_8:curl.src",
"red_hat_enterprise_linux_8:libcurl",
"red_hat_enterprise_linux_8:libcurl-devel",
"red_hat_enterprise_linux_8:libcurl-minimal",
"red_hat_enterprise_linux_9:cargo",
"red_hat_enterprise_linux_9:clippy",
"red_hat_enterprise_linux_9:curl",
"red_hat_enterprise_linux_9:curl-minimal",
"red_hat_enterprise_linux_9:curl.src",
"red_hat_enterprise_linux_9:libcurl",
"red_hat_enterprise_linux_9:libcurl-devel",
"red_hat_enterprise_linux_9:libcurl-minimal",
"red_hat_enterprise_linux_9:rust",
"red_hat_enterprise_linux_9:rust-analysis",
"red_hat_enterprise_linux_9:rust-analyzer",
"red_hat_enterprise_linux_9:rust-debugger-common",
"red_hat_enterprise_linux_9:rust-doc",
"red_hat_enterprise_linux_9:rust-gdb",
"red_hat_enterprise_linux_9:rust-lldb",
"red_hat_enterprise_linux_9:rust-src",
"red_hat_enterprise_linux_9:rust-std-static",
"red_hat_enterprise_linux_9:rust-std-static-wasm32-unknown-unknown",
"red_hat_enterprise_linux_9:rust-std-static-wasm32-wasi",
"red_hat_enterprise_linux_9:rust-toolset",
"red_hat_enterprise_linux_9:rust.src",
"red_hat_enterprise_linux_9:rustfmt",
"red_hat_enterprise_linux_9:snphost.src",
"red_hat_enterprise_linux_9:trustee-guest-components.src",
"red_hat_jboss_core_services:curl",
"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-8",
"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-9",
"red_hat_openshift_container_platform_4:openshift4/recert-rhel9",
"red_hat_openshift_dev_spaces:devspaces/code-rhel9",
"red_hat_trusted_profile_analyzer:rhtpa/rhtpa-trustification-service-rhel9"
]
},
{
"category": "no_fix_planned",
"details": "Will not fix",
"product_ids": [
"red_hat_enterprise_linux_9:curl",
"red_hat_enterprise_linux_9:curl-minimal",
"red_hat_enterprise_linux_9:curl.src",
"red_hat_enterprise_linux_9:libcurl",
"red_hat_enterprise_linux_9:libcurl-devel",
"red_hat_enterprise_linux_9:libcurl-minimal"
]
},
{
"category": "none_available",
"details": "Fix deferred",
"product_ids": [
"confidential_compute_attestation:build-of-trustee/trustee-rhel9",
"confidential_compute_attestation:confidential-compute-attestation-tech-preview/trustee-rhel9",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-operator-bundle",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-podvm-builder-rhel9",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-podvm-payload-rhel9",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-rhel9-operator",
"logging_subsystem_for_red_hat_openshift:openshift-logging/cluster-logging-operator-bundle",
"logging_subsystem_for_red_hat_openshift:openshift-logging/cluster-logging-rhel9-operator",
"logging_subsystem_for_red_hat_openshift:openshift-logging/eventrouter-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/fluentd-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/log-file-metric-exporter-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/logging-view-plugin-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/vector-rhel9",
"openshift_service_mesh_2:openshift-service-mesh/grafana-rhel8",
"openshift_service_mesh_2:openshift-service-mesh/istio-cni-rhel8",
"openshift_service_mesh_2:openshift-service-mesh/istio-must-gather-rhel9",
"openshift_service_mesh_2:openshift-service-mesh/istio-operator-bundle",
"openshift_service_mesh_2:openshift-service-mesh/istio-rhel8-operator",
"openshift_service_mesh_2:openshift-service-mesh/pilot-rhel8",
"openshift_service_mesh_2:openshift-service-mesh/proxyv2-rhel9",
"openshift_service_mesh_2:openshift-service-mesh/ratelimit-rhel8",
"red_hat_enterprise_linux_10:cargo",
"red_hat_enterprise_linux_10:clippy",
"red_hat_enterprise_linux_10:rust-analyzer",
"red_hat_enterprise_linux_10:rust-debugger-common",
"red_hat_enterprise_linux_10:rust-doc",
"red_hat_enterprise_linux_10:rust-gdb",
"red_hat_enterprise_linux_10:rust-lldb",
"red_hat_enterprise_linux_10:rust-src",
"red_hat_enterprise_linux_10:rust-std-static",
"red_hat_enterprise_linux_10:rust-std-static-aarch64-unknown-none-softfloat",
"red_hat_enterprise_linux_10:rust-std-static-wasm32-unknown-unknown",
"red_hat_enterprise_linux_10:rust-std-static-wasm32-wasip1",
"red_hat_enterprise_linux_10:rust-std-static-x86_64-unknown-none",
"red_hat_enterprise_linux_10:rust-toolset",
"red_hat_enterprise_linux_10:rust-toolset-srpm-macros",
"red_hat_enterprise_linux_10:rust.src",
"red_hat_enterprise_linux_10:rustfmt",
"red_hat_enterprise_linux_10:s390utils-base",
"red_hat_enterprise_linux_10:s390utils-chreipl-fcp-mpath",
"red_hat_enterprise_linux_10:s390utils-cmsfs-fuse",
"red_hat_enterprise_linux_10:s390utils-core",
"red_hat_enterprise_linux_10:s390utils-cpacfstatsd",
"red_hat_enterprise_linux_10:s390utils-cpuplugd",
"red_hat_enterprise_linux_10:s390utils-devel",
"red_hat_enterprise_linux_10:s390utils-hmcdrvfs",
"red_hat_enterprise_linux_10:s390utils-iucvterm",
"red_hat_enterprise_linux_10:s390utils-mon_statd",
"red_hat_enterprise_linux_10:s390utils-osasnmpd",
"red_hat_enterprise_linux_10:s390utils-se-data",
"red_hat_enterprise_linux_10:s390utils-zdsfs",
"red_hat_enterprise_linux_10:s390utils-ziomon",
"red_hat_enterprise_linux_10:s390utils.src",
"red_hat_enterprise_linux_10:snphost.src",
"red_hat_enterprise_linux_10:trustee-guest-components.src",
"red_hat_enterprise_linux_6:curl",
"red_hat_enterprise_linux_6:curl.src",
"red_hat_enterprise_linux_6:libcurl",
"red_hat_enterprise_linux_6:libcurl-devel",
"red_hat_enterprise_linux_7:curl",
"red_hat_enterprise_linux_7:curl.src",
"red_hat_enterprise_linux_7:libcurl",
"red_hat_enterprise_linux_7:libcurl-devel",
"red_hat_enterprise_linux_8:curl",
"red_hat_enterprise_linux_8:curl.src",
"red_hat_enterprise_linux_8:libcurl",
"red_hat_enterprise_linux_8:libcurl-devel",
"red_hat_enterprise_linux_8:libcurl-minimal",
"red_hat_enterprise_linux_9:cargo",
"red_hat_enterprise_linux_9:clippy",
"red_hat_enterprise_linux_9:rust",
"red_hat_enterprise_linux_9:rust-analysis",
"red_hat_enterprise_linux_9:rust-analyzer",
"red_hat_enterprise_linux_9:rust-debugger-common",
"red_hat_enterprise_linux_9:rust-doc",
"red_hat_enterprise_linux_9:rust-gdb",
"red_hat_enterprise_linux_9:rust-lldb",
"red_hat_enterprise_linux_9:rust-src",
"red_hat_enterprise_linux_9:rust-std-static",
"red_hat_enterprise_linux_9:rust-std-static-wasm32-unknown-unknown",
"red_hat_enterprise_linux_9:rust-std-static-wasm32-wasi",
"red_hat_enterprise_linux_9:rust-toolset",
"red_hat_enterprise_linux_9:rust.src",
"red_hat_enterprise_linux_9:rustfmt",
"red_hat_enterprise_linux_9:snphost.src",
"red_hat_enterprise_linux_9:trustee-guest-components.src",
"red_hat_jboss_core_services:curl",
"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-8",
"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-9",
"red_hat_openshift_container_platform_4:openshift4/recert-rhel9",
"red_hat_openshift_dev_spaces:devspaces/code-rhel9",
"red_hat_trusted_profile_analyzer:rhtpa/rhtpa-trustification-service-rhel9"
]
},
{
"category": "none_available",
"details": "Affected",
"product_ids": [
"red_hat_enterprise_linux_10:curl",
"red_hat_enterprise_linux_10:curl.src",
"red_hat_enterprise_linux_10:libcurl",
"red_hat_enterprise_linux_10:libcurl-devel",
"red_hat_enterprise_linux_10:libcurl-minimal"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64",
"confidential_compute_attestation:build-of-trustee/trustee-rhel9",
"confidential_compute_attestation:confidential-compute-attestation-tech-preview/trustee-rhel9",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-operator-bundle",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-podvm-builder-rhel9",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-podvm-payload-rhel9",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-rhel9-operator",
"logging_subsystem_for_red_hat_openshift:openshift-logging/cluster-logging-operator-bundle",
"logging_subsystem_for_red_hat_openshift:openshift-logging/cluster-logging-rhel9-operator",
"logging_subsystem_for_red_hat_openshift:openshift-logging/eventrouter-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/fluentd-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/log-file-metric-exporter-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/logging-view-plugin-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/vector-rhel9",
"openshift_service_mesh_2:openshift-service-mesh/grafana-rhel8",
"openshift_service_mesh_2:openshift-service-mesh/istio-cni-rhel8",
"openshift_service_mesh_2:openshift-service-mesh/istio-must-gather-rhel9",
"openshift_service_mesh_2:openshift-service-mesh/istio-operator-bundle",
"openshift_service_mesh_2:openshift-service-mesh/istio-rhel8-operator",
"openshift_service_mesh_2:openshift-service-mesh/pilot-rhel8",
"openshift_service_mesh_2:openshift-service-mesh/proxyv2-rhel9",
"openshift_service_mesh_2:openshift-service-mesh/ratelimit-rhel8",
"red_hat_enterprise_linux_10:cargo",
"red_hat_enterprise_linux_10:clippy",
"red_hat_enterprise_linux_10:curl",
"red_hat_enterprise_linux_10:curl.src",
"red_hat_enterprise_linux_10:libcurl",
"red_hat_enterprise_linux_10:libcurl-devel",
"red_hat_enterprise_linux_10:libcurl-minimal",
"red_hat_enterprise_linux_10:rust-analyzer",
"red_hat_enterprise_linux_10:rust-debugger-common",
"red_hat_enterprise_linux_10:rust-doc",
"red_hat_enterprise_linux_10:rust-gdb",
"red_hat_enterprise_linux_10:rust-lldb",
"red_hat_enterprise_linux_10:rust-src",
"red_hat_enterprise_linux_10:rust-std-static",
"red_hat_enterprise_linux_10:rust-std-static-aarch64-unknown-none-softfloat",
"red_hat_enterprise_linux_10:rust-std-static-wasm32-unknown-unknown",
"red_hat_enterprise_linux_10:rust-std-static-wasm32-wasip1",
"red_hat_enterprise_linux_10:rust-std-static-x86_64-unknown-none",
"red_hat_enterprise_linux_10:rust-toolset",
"red_hat_enterprise_linux_10:rust-toolset-srpm-macros",
"red_hat_enterprise_linux_10:rust.src",
"red_hat_enterprise_linux_10:rustfmt",
"red_hat_enterprise_linux_10:s390utils-base",
"red_hat_enterprise_linux_10:s390utils-chreipl-fcp-mpath",
"red_hat_enterprise_linux_10:s390utils-cmsfs-fuse",
"red_hat_enterprise_linux_10:s390utils-core",
"red_hat_enterprise_linux_10:s390utils-cpacfstatsd",
"red_hat_enterprise_linux_10:s390utils-cpuplugd",
"red_hat_enterprise_linux_10:s390utils-devel",
"red_hat_enterprise_linux_10:s390utils-hmcdrvfs",
"red_hat_enterprise_linux_10:s390utils-iucvterm",
"red_hat_enterprise_linux_10:s390utils-mon_statd",
"red_hat_enterprise_linux_10:s390utils-osasnmpd",
"red_hat_enterprise_linux_10:s390utils-se-data",
"red_hat_enterprise_linux_10:s390utils-zdsfs",
"red_hat_enterprise_linux_10:s390utils-ziomon",
"red_hat_enterprise_linux_10:s390utils.src",
"red_hat_enterprise_linux_10:snphost.src",
"red_hat_enterprise_linux_10:trustee-guest-components.src",
"red_hat_enterprise_linux_6:curl",
"red_hat_enterprise_linux_6:curl.src",
"red_hat_enterprise_linux_6:libcurl",
"red_hat_enterprise_linux_6:libcurl-devel",
"red_hat_enterprise_linux_7:curl",
"red_hat_enterprise_linux_7:curl.src",
"red_hat_enterprise_linux_7:libcurl",
"red_hat_enterprise_linux_7:libcurl-devel",
"red_hat_enterprise_linux_8:curl",
"red_hat_enterprise_linux_8:curl.src",
"red_hat_enterprise_linux_8:libcurl",
"red_hat_enterprise_linux_8:libcurl-devel",
"red_hat_enterprise_linux_8:libcurl-minimal",
"red_hat_enterprise_linux_9:cargo",
"red_hat_enterprise_linux_9:clippy",
"red_hat_enterprise_linux_9:curl",
"red_hat_enterprise_linux_9:curl-minimal",
"red_hat_enterprise_linux_9:curl.src",
"red_hat_enterprise_linux_9:libcurl",
"red_hat_enterprise_linux_9:libcurl-devel",
"red_hat_enterprise_linux_9:libcurl-minimal",
"red_hat_enterprise_linux_9:rust",
"red_hat_enterprise_linux_9:rust-analysis",
"red_hat_enterprise_linux_9:rust-analyzer",
"red_hat_enterprise_linux_9:rust-debugger-common",
"red_hat_enterprise_linux_9:rust-doc",
"red_hat_enterprise_linux_9:rust-gdb",
"red_hat_enterprise_linux_9:rust-lldb",
"red_hat_enterprise_linux_9:rust-src",
"red_hat_enterprise_linux_9:rust-std-static",
"red_hat_enterprise_linux_9:rust-std-static-wasm32-unknown-unknown",
"red_hat_enterprise_linux_9:rust-std-static-wasm32-wasi",
"red_hat_enterprise_linux_9:rust-toolset",
"red_hat_enterprise_linux_9:rust.src",
"red_hat_enterprise_linux_9:rustfmt",
"red_hat_enterprise_linux_9:snphost.src",
"red_hat_enterprise_linux_9:trustee-guest-components.src",
"red_hat_jboss_core_services:curl",
"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-8",
"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-9",
"red_hat_openshift_container_platform_4:openshift4/recert-rhel9",
"red_hat_openshift_dev_spaces:devspaces/code-rhel9",
"red_hat_trusted_profile_analyzer:rhtpa/rhtpa-trustification-service-rhel9"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate",
"product_ids": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64",
"confidential_compute_attestation:build-of-trustee/trustee-rhel9",
"confidential_compute_attestation:confidential-compute-attestation-tech-preview/trustee-rhel9",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-operator-bundle",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-podvm-builder-rhel9",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-podvm-payload-rhel9",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-rhel9-operator",
"logging_subsystem_for_red_hat_openshift:openshift-logging/cluster-logging-operator-bundle",
"logging_subsystem_for_red_hat_openshift:openshift-logging/cluster-logging-rhel9-operator",
"logging_subsystem_for_red_hat_openshift:openshift-logging/eventrouter-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/fluentd-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/log-file-metric-exporter-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/logging-view-plugin-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/vector-rhel9",
"openshift_service_mesh_2:openshift-service-mesh/grafana-rhel8",
"openshift_service_mesh_2:openshift-service-mesh/istio-cni-rhel8",
"openshift_service_mesh_2:openshift-service-mesh/istio-must-gather-rhel9",
"openshift_service_mesh_2:openshift-service-mesh/istio-operator-bundle",
"openshift_service_mesh_2:openshift-service-mesh/istio-rhel8-operator",
"openshift_service_mesh_2:openshift-service-mesh/pilot-rhel8",
"openshift_service_mesh_2:openshift-service-mesh/proxyv2-rhel9",
"openshift_service_mesh_2:openshift-service-mesh/ratelimit-rhel8",
"red_hat_enterprise_linux_10:cargo",
"red_hat_enterprise_linux_10:clippy",
"red_hat_enterprise_linux_10:curl",
"red_hat_enterprise_linux_10:curl.src",
"red_hat_enterprise_linux_10:libcurl",
"red_hat_enterprise_linux_10:libcurl-devel",
"red_hat_enterprise_linux_10:libcurl-minimal",
"red_hat_enterprise_linux_10:rust-analyzer",
"red_hat_enterprise_linux_10:rust-debugger-common",
"red_hat_enterprise_linux_10:rust-doc",
"red_hat_enterprise_linux_10:rust-gdb",
"red_hat_enterprise_linux_10:rust-lldb",
"red_hat_enterprise_linux_10:rust-src",
"red_hat_enterprise_linux_10:rust-std-static",
"red_hat_enterprise_linux_10:rust-std-static-aarch64-unknown-none-softfloat",
"red_hat_enterprise_linux_10:rust-std-static-wasm32-unknown-unknown",
"red_hat_enterprise_linux_10:rust-std-static-wasm32-wasip1",
"red_hat_enterprise_linux_10:rust-std-static-x86_64-unknown-none",
"red_hat_enterprise_linux_10:rust-toolset",
"red_hat_enterprise_linux_10:rust-toolset-srpm-macros",
"red_hat_enterprise_linux_10:rust.src",
"red_hat_enterprise_linux_10:rustfmt",
"red_hat_enterprise_linux_10:s390utils-base",
"red_hat_enterprise_linux_10:s390utils-chreipl-fcp-mpath",
"red_hat_enterprise_linux_10:s390utils-cmsfs-fuse",
"red_hat_enterprise_linux_10:s390utils-core",
"red_hat_enterprise_linux_10:s390utils-cpacfstatsd",
"red_hat_enterprise_linux_10:s390utils-cpuplugd",
"red_hat_enterprise_linux_10:s390utils-devel",
"red_hat_enterprise_linux_10:s390utils-hmcdrvfs",
"red_hat_enterprise_linux_10:s390utils-iucvterm",
"red_hat_enterprise_linux_10:s390utils-mon_statd",
"red_hat_enterprise_linux_10:s390utils-osasnmpd",
"red_hat_enterprise_linux_10:s390utils-se-data",
"red_hat_enterprise_linux_10:s390utils-zdsfs",
"red_hat_enterprise_linux_10:s390utils-ziomon",
"red_hat_enterprise_linux_10:s390utils.src",
"red_hat_enterprise_linux_10:snphost.src",
"red_hat_enterprise_linux_10:trustee-guest-components.src",
"red_hat_enterprise_linux_6:curl",
"red_hat_enterprise_linux_6:curl.src",
"red_hat_enterprise_linux_6:libcurl",
"red_hat_enterprise_linux_6:libcurl-devel",
"red_hat_enterprise_linux_7:curl",
"red_hat_enterprise_linux_7:curl.src",
"red_hat_enterprise_linux_7:libcurl",
"red_hat_enterprise_linux_7:libcurl-devel",
"red_hat_enterprise_linux_8:curl",
"red_hat_enterprise_linux_8:curl.src",
"red_hat_enterprise_linux_8:libcurl",
"red_hat_enterprise_linux_8:libcurl-devel",
"red_hat_enterprise_linux_8:libcurl-minimal",
"red_hat_enterprise_linux_9:cargo",
"red_hat_enterprise_linux_9:clippy",
"red_hat_enterprise_linux_9:curl",
"red_hat_enterprise_linux_9:curl-minimal",
"red_hat_enterprise_linux_9:curl.src",
"red_hat_enterprise_linux_9:libcurl",
"red_hat_enterprise_linux_9:libcurl-devel",
"red_hat_enterprise_linux_9:libcurl-minimal",
"red_hat_enterprise_linux_9:rust",
"red_hat_enterprise_linux_9:rust-analysis",
"red_hat_enterprise_linux_9:rust-analyzer",
"red_hat_enterprise_linux_9:rust-debugger-common",
"red_hat_enterprise_linux_9:rust-doc",
"red_hat_enterprise_linux_9:rust-gdb",
"red_hat_enterprise_linux_9:rust-lldb",
"red_hat_enterprise_linux_9:rust-src",
"red_hat_enterprise_linux_9:rust-std-static",
"red_hat_enterprise_linux_9:rust-std-static-wasm32-unknown-unknown",
"red_hat_enterprise_linux_9:rust-std-static-wasm32-wasi",
"red_hat_enterprise_linux_9:rust-toolset",
"red_hat_enterprise_linux_9:rust.src",
"red_hat_enterprise_linux_9:rustfmt",
"red_hat_enterprise_linux_9:snphost.src",
"red_hat_enterprise_linux_9:trustee-guest-components.src",
"red_hat_jboss_core_services:curl",
"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-8",
"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-9",
"red_hat_openshift_container_platform_4:openshift4/recert-rhel9",
"red_hat_openshift_dev_spaces:devspaces/code-rhel9",
"red_hat_trusted_profile_analyzer:rhtpa/rhtpa-trustification-service-rhel9"
]
}
],
"title": "curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers"
}
]
}
Enrichment data
Aggregated bundle (all enrichments)