cve-2026-9080
HIGH CVSS 7.3 csaf_redhat
Description
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Timeline
- Published
- 2026-07-03 06:17 UTC
- Last Modified
- 2026-09-01
CVSS Details
CVSS details not available.
Affected Products
No product information available.
Weaknesses (CWE)
References
No references available.
Linked Vulnerabilities
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_vex",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright © Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9080.json"
}
],
"title": "libcurl: libcurl: Use-after-free via curl_easy_pause() in CURLMOPT_SOCKETFUNCTION callback",
"tracking": {
"current_release_date": "2026-09-01T08:38:55+00:00",
"generator": {
"date": "2026-09-01T08:38:55+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "CVE-2026-9080",
"initial_release_date": "2026-07-03T06:17:34.905000+00:00",
"revision_history": [
{
"date": "2026-07-03T06:17:34.905000+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-01T07:17:59+00:00",
"number": "2",
"summary": "Current version"
},
{
"date": "2026-09-01T08:38:55+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Confidential Compute Attestation",
"product": {
"name": "Confidential Compute Attestation",
"product_id": "confidential_compute_attestation",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:confidential_compute_attestation:1"
}
}
}
],
"category": "product_family",
"name": "Confidential Compute Attestation"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux 10",
"product": {
"name": "Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux 10"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux 6",
"product": {
"name": "Red Hat Enterprise Linux 6",
"product_id": "red_hat_enterprise_linux_6",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux 6"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux 7",
"product": {
"name": "Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux 7"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux 8",
"product": {
"name": "Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux 8"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux 9",
"product": {
"name": "Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux 9"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"product": {
"name": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"product_id": "red_hat_enterprise_linux_ai_(rhel_ai)_3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux_ai:3"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux AI (RHEL AI) 3"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Core Services",
"product": {
"name": "Red Hat JBoss Core Services",
"product_id": "red_hat_jboss_core_services",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_core_services:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Core Services"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Container Platform 4",
"product": {
"name": "Red Hat OpenShift Container Platform 4",
"product_id": "red_hat_openshift_container_platform_4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:4"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Container Platform 4"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Dev Spaces",
"product": {
"name": "Red Hat OpenShift Dev Spaces",
"product_id": "red_hat_openshift_dev_spaces",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_devspaces:3"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Dev Spaces"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Trusted Profile Analyzer",
"product": {
"name": "Red Hat Trusted Profile Analyzer",
"product_id": "red_hat_trusted_profile_analyzer",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:trusted_profile_analyzer:2"
}
}
}
],
"category": "product_family",
"name": "Red Hat Trusted Profile Analyzer"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Hardened Images",
"product": {
"name": "Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:hummingbird:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Hardened Images"
},
{
"category": "product_version",
"name": "build-of-trustee/trustee-rhel9",
"product": {
"name": "build-of-trustee/trustee-rhel9",
"product_id": "build-of-trustee/trustee-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/trustee-rhel9?repository_url=registry.redhat.io/build-of-trustee/trustee-rhel9"
}
}
},
{
"category": "product_version",
"name": "openshift-sandboxed-containers/osc-podvm-payload-rhel9",
"product": {
"name": "openshift-sandboxed-containers/osc-podvm-payload-rhel9",
"product_id": "openshift-sandboxed-containers/osc-podvm-payload-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/osc-podvm-payload-rhel9?repository_url=registry.redhat.io/openshift-sandboxed-containers/osc-podvm-payload-rhel9"
}
}
},
{
"category": "product_version",
"name": "libcurl",
"product": {
"name": "libcurl",
"product_id": "libcurl",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl"
}
}
},
{
"category": "product_version",
"name": "curl",
"product": {
"name": "curl",
"product_id": "curl",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl"
}
}
},
{
"category": "product_version",
"name": "libcurl-minimal",
"product": {
"name": "libcurl-minimal",
"product_id": "libcurl-minimal",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-minimal"
}
}
},
{
"category": "product_version",
"name": "curl.src",
"product": {
"name": "curl.src",
"product_id": "curl.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl?arch=src"
}
}
},
{
"category": "product_version",
"name": "libcurl-devel",
"product": {
"name": "libcurl-devel",
"product_id": "libcurl-devel",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-devel"
}
}
},
{
"category": "product_version",
"name": "igvm.src",
"product": {
"name": "igvm.src",
"product_id": "igvm.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/igvm?arch=src"
}
}
},
{
"category": "product_version",
"name": "rust-lldb",
"product": {
"name": "rust-lldb",
"product_id": "rust-lldb",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-lldb"
}
}
},
{
"category": "product_version",
"name": "rust-src",
"product": {
"name": "rust-src",
"product_id": "rust-src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-src"
}
}
},
{
"category": "product_version",
"name": "cargo",
"product": {
"name": "cargo",
"product_id": "cargo",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cargo"
}
}
},
{
"category": "product_version",
"name": "rust-std-static",
"product": {
"name": "rust-std-static",
"product_id": "rust-std-static",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-std-static"
}
}
},
{
"category": "product_version",
"name": "rust-analyzer",
"product": {
"name": "rust-analyzer",
"product_id": "rust-analyzer",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-analyzer"
}
}
},
{
"category": "product_version",
"name": "rust-std-static-wasm32-wasip1",
"product": {
"name": "rust-std-static-wasm32-wasip1",
"product_id": "rust-std-static-wasm32-wasip1",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-std-static-wasm32-wasip1"
}
}
},
{
"category": "product_version",
"name": "rust-std-static-x86_64-unknown-none",
"product": {
"name": "rust-std-static-x86_64-unknown-none",
"product_id": "rust-std-static-x86_64-unknown-none",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-std-static-x86_64-unknown-none"
}
}
},
{
"category": "product_version",
"name": "rust-toolset",
"product": {
"name": "rust-toolset",
"product_id": "rust-toolset",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-toolset"
}
}
},
{
"category": "product_version",
"name": "rust-debugger-common",
"product": {
"name": "rust-debugger-common",
"product_id": "rust-debugger-common",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-debugger-common"
}
}
},
{
"category": "product_version",
"name": "rust-doc",
"product": {
"name": "rust-doc",
"product_id": "rust-doc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-doc"
}
}
},
{
"category": "product_version",
"name": "clippy",
"product": {
"name": "clippy",
"product_id": "clippy",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/clippy"
}
}
},
{
"category": "product_version",
"name": "rust.src",
"product": {
"name": "rust.src",
"product_id": "rust.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust?arch=src"
}
}
},
{
"category": "product_version",
"name": "rust-std-static-wasm32-unknown-unknown",
"product": {
"name": "rust-std-static-wasm32-unknown-unknown",
"product_id": "rust-std-static-wasm32-unknown-unknown",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-std-static-wasm32-unknown-unknown"
}
}
},
{
"category": "product_version",
"name": "rustfmt",
"product": {
"name": "rustfmt",
"product_id": "rustfmt",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rustfmt"
}
}
},
{
"category": "product_version",
"name": "rust-gdb",
"product": {
"name": "rust-gdb",
"product_id": "rust-gdb",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-gdb"
}
}
},
{
"category": "product_version",
"name": "rust-std-static-aarch64-unknown-none-softfloat",
"product": {
"name": "rust-std-static-aarch64-unknown-none-softfloat",
"product_id": "rust-std-static-aarch64-unknown-none-softfloat",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-std-static-aarch64-unknown-none-softfloat"
}
}
},
{
"category": "product_version",
"name": "rust-toolset-srpm-macros",
"product": {
"name": "rust-toolset-srpm-macros",
"product_id": "rust-toolset-srpm-macros",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-toolset-srpm-macros"
}
}
},
{
"category": "product_version",
"name": "s390utils-cpuplugd",
"product": {
"name": "s390utils-cpuplugd",
"product_id": "s390utils-cpuplugd",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-cpuplugd"
}
}
},
{
"category": "product_version",
"name": "s390utils.src",
"product": {
"name": "s390utils.src",
"product_id": "s390utils.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils?arch=src"
}
}
},
{
"category": "product_version",
"name": "s390utils-cmsfs-fuse",
"product": {
"name": "s390utils-cmsfs-fuse",
"product_id": "s390utils-cmsfs-fuse",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-cmsfs-fuse"
}
}
},
{
"category": "product_version",
"name": "s390utils-chreipl-fcp-mpath",
"product": {
"name": "s390utils-chreipl-fcp-mpath",
"product_id": "s390utils-chreipl-fcp-mpath",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-chreipl-fcp-mpath"
}
}
},
{
"category": "product_version",
"name": "s390utils-osasnmpd",
"product": {
"name": "s390utils-osasnmpd",
"product_id": "s390utils-osasnmpd",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-osasnmpd"
}
}
},
{
"category": "product_version",
"name": "s390utils-zdsfs",
"product": {
"name": "s390utils-zdsfs",
"product_id": "s390utils-zdsfs",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-zdsfs"
}
}
},
{
"category": "product_version",
"name": "s390utils-se-data",
"product": {
"name": "s390utils-se-data",
"product_id": "s390utils-se-data",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-se-data"
}
}
},
{
"category": "product_version",
"name": "s390utils-core",
"product": {
"name": "s390utils-core",
"product_id": "s390utils-core",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-core"
}
}
},
{
"category": "product_version",
"name": "s390utils-base",
"product": {
"name": "s390utils-base",
"product_id": "s390utils-base",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-base"
}
}
},
{
"category": "product_version",
"name": "s390utils-cpacfstatsd",
"product": {
"name": "s390utils-cpacfstatsd",
"product_id": "s390utils-cpacfstatsd",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-cpacfstatsd"
}
}
},
{
"category": "product_version",
"name": "s390utils-ziomon",
"product": {
"name": "s390utils-ziomon",
"product_id": "s390utils-ziomon",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-ziomon"
}
}
},
{
"category": "product_version",
"name": "s390utils-mon_statd",
"product": {
"name": "s390utils-mon_statd",
"product_id": "s390utils-mon_statd",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-mon_statd"
}
}
},
{
"category": "product_version",
"name": "s390utils-iucvterm",
"product": {
"name": "s390utils-iucvterm",
"product_id": "s390utils-iucvterm",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-iucvterm"
}
}
},
{
"category": "product_version",
"name": "s390utils-hmcdrvfs",
"product": {
"name": "s390utils-hmcdrvfs",
"product_id": "s390utils-hmcdrvfs",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-hmcdrvfs"
}
}
},
{
"category": "product_version",
"name": "s390utils-devel",
"product": {
"name": "s390utils-devel",
"product_id": "s390utils-devel",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-devel"
}
}
},
{
"category": "product_version",
"name": "snphost.src",
"product": {
"name": "snphost.src",
"product_id": "snphost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/snphost?arch=src"
}
}
},
{
"category": "product_version",
"name": "trustee-kbs",
"product": {
"name": "trustee-kbs",
"product_id": "trustee-kbs",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/trustee-kbs"
}
}
},
{
"category": "product_version",
"name": "trustee-guest-components.src",
"product": {
"name": "trustee-guest-components.src",
"product_id": "trustee-guest-components.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/trustee-guest-components?arch=src"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0",
"product": {
"name": "dotnet-sdk-8.0",
"product_id": "dotnet-sdk-8.0",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0",
"product": {
"name": "dotnet-runtime-8.0",
"product_id": "dotnet-runtime-8.0",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0"
}
}
},
{
"category": "product_version",
"name": "netstandard-targeting-pack-2.1",
"product": {
"name": "netstandard-targeting-pack-2.1",
"product_id": "netstandard-targeting-pack-2.1",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/netstandard-targeting-pack-2.1"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-8.0",
"product": {
"name": "aspnetcore-targeting-pack-8.0",
"product_id": "aspnetcore-targeting-pack-8.0",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-8.0"
}
}
},
{
"category": "product_version",
"name": "dotnet8.0.src",
"product": {
"name": "dotnet8.0.src",
"product_id": "dotnet8.0.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0?arch=src"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-8.0",
"product": {
"name": "dotnet-templates-8.0",
"product_id": "dotnet-templates-8.0",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-8.0"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-8.0",
"product": {
"name": "dotnet-runtime-dbg-8.0",
"product_id": "dotnet-runtime-dbg-8.0",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-8.0"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-8.0",
"product": {
"name": "dotnet-sdk-dbg-8.0",
"product_id": "dotnet-sdk-dbg-8.0",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-8.0"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0",
"product": {
"name": "dotnet-apphost-pack-8.0",
"product_id": "dotnet-apphost-pack-8.0",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0"
}
}
},
{
"category": "product_version",
"name": "dotnet-host",
"product": {
"name": "dotnet-host",
"product_id": "dotnet-host",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host"
}
}
},
{
"category": "product_version",
"name": "dotnet",
"product": {
"name": "dotnet",
"product_id": "dotnet",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-8.0",
"product": {
"name": "aspnetcore-runtime-dbg-8.0",
"product_id": "aspnetcore-runtime-dbg-8.0",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-8.0"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-source-built-artifacts",
"product": {
"name": "dotnet-sdk-8.0-source-built-artifacts",
"product_id": "dotnet-sdk-8.0-source-built-artifacts",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-source-built-artifacts"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-8.0",
"product": {
"name": "dotnet-targeting-pack-8.0",
"product_id": "dotnet-targeting-pack-8.0",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-8.0"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0",
"product": {
"name": "dotnet-hostfxr-8.0",
"product_id": "dotnet-hostfxr-8.0",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-8.0",
"product": {
"name": "aspnetcore-runtime-8.0",
"product_id": "aspnetcore-runtime-8.0",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-8.0"
}
}
},
{
"category": "product_version",
"name": "curl-minimal",
"product": {
"name": "curl-minimal",
"product_id": "curl-minimal",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl-minimal"
}
}
},
{
"category": "product_version",
"name": "rust-analysis",
"product": {
"name": "rust-analysis",
"product_id": "rust-analysis",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-analysis"
}
}
},
{
"category": "product_version",
"name": "rust-std-static-wasm32-wasi",
"product": {
"name": "rust-std-static-wasm32-wasi",
"product_id": "rust-std-static-wasm32-wasi",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-std-static-wasm32-wasi"
}
}
},
{
"category": "product_version",
"name": "rust",
"product": {
"name": "rust",
"product_id": "rust",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust"
}
}
},
{
"category": "product_version",
"name": "libcurl-1.dll",
"product": {
"name": "libcurl-1.dll",
"product_id": "libcurl-1.dll",
"product_identification_helper": {
"purl": "pkg:generic/libcurl-1.dll"
}
}
},
{
"category": "product_version",
"name": "libcurl.so",
"product": {
"name": "libcurl.so",
"product_id": "libcurl.so",
"product_identification_helper": {
"purl": "pkg:generic/libcurl.so"
}
}
},
{
"category": "product_version",
"name": "openshift/ose-rhel-coreos-8",
"product": {
"name": "openshift/ose-rhel-coreos-8",
"product_id": "openshift/ose-rhel-coreos-8",
"product_identification_helper": {
"purl": "pkg:oci/ose-rhel-coreos-8?repository_url=registry.redhat.io/openshift/ose-rhel-coreos-8"
}
}
},
{
"category": "product_version",
"name": "openshift/ose-rhel-coreos-9",
"product": {
"name": "openshift/ose-rhel-coreos-9",
"product_id": "openshift/ose-rhel-coreos-9",
"product_identification_helper": {
"purl": "pkg:oci/ose-rhel-coreos-9?repository_url=registry.redhat.io/openshift/ose-rhel-coreos-9"
}
}
},
{
"category": "product_version",
"name": "devspaces/code-rhel9",
"product": {
"name": "devspaces/code-rhel9",
"product_id": "devspaces/code-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/code-rhel9?repository_url=registry.redhat.io/devspaces/code-rhel9"
}
}
},
{
"category": "product_version",
"name": "rhtpa/rhtpa-trustification-service-rhel9",
"product": {
"name": "rhtpa/rhtpa-trustification-service-rhel9",
"product_id": "rhtpa/rhtpa-trustification-service-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/rhtpa-trustification-service-rhel9?repository_url=registry.redhat.io/rhtpa/rhtpa-trustification-service-rhel9"
}
}
},
{
"branches": [
{
"category": "product_version",
"name": "curl-main@aarch64",
"product": {
"name": "curl-main@aarch64",
"product_id": "curl-main@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl@8.21.0-0.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "rust-main@aarch64",
"product": {
"name": "rust-main@aarch64",
"product_id": "rust-main@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cargo@1.96.1-1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "curl-main@src",
"product": {
"name": "curl-main@src",
"product_id": "curl-main@src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl@8.21.0-0.1.hum1?arch=src&distro=hummingbird-20251124&repository_id=public-hummingbird-source-rpms"
}
}
},
{
"category": "product_version",
"name": "rust-main@src",
"product": {
"name": "rust-main@src",
"product_id": "rust-main@src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust@1.96.1-1.hum1?arch=src&distro=hummingbird-20251124&repository_id=public-hummingbird-source-rpms"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "curl-main@x86_64",
"product": {
"name": "curl-main@x86_64",
"product_id": "curl-main@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl@8.21.0-0.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "rust-main@x86_64",
"product": {
"name": "rust-main@x86_64",
"product_id": "rust-main@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cargo@1.96.1-1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "rust-main@noarch",
"product": {
"name": "rust-main@noarch",
"product_id": "rust-main@noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-debugger-common@1.96.1-1.hum1?arch=noarch&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-main@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:curl-main@aarch64"
},
"product_reference": "curl-main@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-main@src as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:curl-main@src"
},
"product_reference": "curl-main@src",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-main@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:curl-main@x86_64"
},
"product_reference": "curl-main@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-main@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rust-main@aarch64"
},
"product_reference": "rust-main@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-main@noarch as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rust-main@noarch"
},
"product_reference": "rust-main@noarch",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-main@src as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rust-main@src"
},
"product_reference": "rust-main@src",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-main@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rust-main@x86_64"
},
"product_reference": "rust-main@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "build-of-trustee/trustee-rhel9 as a component of Confidential Compute Attestation",
"product_id": "confidential_compute_attestation:build-of-trustee/trustee-rhel9"
},
"product_reference": "build-of-trustee/trustee-rhel9",
"relates_to_product_reference": "confidential_compute_attestation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-sandboxed-containers/osc-podvm-payload-rhel9 as a component of Confidential Compute Attestation",
"product_id": "confidential_compute_attestation:openshift-sandboxed-containers/osc-podvm-payload-rhel9"
},
"product_reference": "openshift-sandboxed-containers/osc-podvm-payload-rhel9",
"relates_to_product_reference": "confidential_compute_attestation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:cargo"
},
"product_reference": "cargo",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clippy as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:clippy"
},
"product_reference": "clippy",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:curl"
},
"product_reference": "curl",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl.src as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:curl.src"
},
"product_reference": "curl.src",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "igvm.src as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:igvm.src"
},
"product_reference": "igvm.src",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:libcurl"
},
"product_reference": "libcurl",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:libcurl-devel"
},
"product_reference": "libcurl-devel",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-minimal as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:libcurl-minimal"
},
"product_reference": "libcurl-minimal",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-analyzer as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-analyzer"
},
"product_reference": "rust-analyzer",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-debugger-common as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-debugger-common"
},
"product_reference": "rust-debugger-common",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-doc as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-doc"
},
"product_reference": "rust-doc",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-gdb as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-gdb"
},
"product_reference": "rust-gdb",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-lldb as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-lldb"
},
"product_reference": "rust-lldb",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-src as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-src"
},
"product_reference": "rust-src",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-std-static"
},
"product_reference": "rust-std-static",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-aarch64-unknown-none-softfloat as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-std-static-aarch64-unknown-none-softfloat"
},
"product_reference": "rust-std-static-aarch64-unknown-none-softfloat",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-wasm32-unknown-unknown as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-std-static-wasm32-unknown-unknown"
},
"product_reference": "rust-std-static-wasm32-unknown-unknown",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-wasm32-wasip1 as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-std-static-wasm32-wasip1"
},
"product_reference": "rust-std-static-wasm32-wasip1",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-x86_64-unknown-none as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-std-static-x86_64-unknown-none"
},
"product_reference": "rust-std-static-x86_64-unknown-none",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-toolset as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-toolset"
},
"product_reference": "rust-toolset",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-toolset-srpm-macros as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-toolset-srpm-macros"
},
"product_reference": "rust-toolset-srpm-macros",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust.src as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust.src"
},
"product_reference": "rust.src",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rustfmt as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rustfmt"
},
"product_reference": "rustfmt",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-base as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-base"
},
"product_reference": "s390utils-base",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-chreipl-fcp-mpath as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-chreipl-fcp-mpath"
},
"product_reference": "s390utils-chreipl-fcp-mpath",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-cmsfs-fuse as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-cmsfs-fuse"
},
"product_reference": "s390utils-cmsfs-fuse",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-core as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-core"
},
"product_reference": "s390utils-core",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-cpacfstatsd as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-cpacfstatsd"
},
"product_reference": "s390utils-cpacfstatsd",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-cpuplugd as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-cpuplugd"
},
"product_reference": "s390utils-cpuplugd",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-devel as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-devel"
},
"product_reference": "s390utils-devel",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-hmcdrvfs as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-hmcdrvfs"
},
"product_reference": "s390utils-hmcdrvfs",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-iucvterm as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-iucvterm"
},
"product_reference": "s390utils-iucvterm",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-mon_statd as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-mon_statd"
},
"product_reference": "s390utils-mon_statd",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-osasnmpd as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-osasnmpd"
},
"product_reference": "s390utils-osasnmpd",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-se-data as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-se-data"
},
"product_reference": "s390utils-se-data",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-zdsfs as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-zdsfs"
},
"product_reference": "s390utils-zdsfs",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-ziomon as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-ziomon"
},
"product_reference": "s390utils-ziomon",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils.src as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils.src"
},
"product_reference": "s390utils.src",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "snphost.src as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:snphost.src"
},
"product_reference": "snphost.src",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trustee-guest-components.src as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:trustee-guest-components.src"
},
"product_reference": "trustee-guest-components.src",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trustee-kbs as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:trustee-kbs"
},
"product_reference": "trustee-kbs",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl as a component of Red Hat Enterprise Linux 6",
"product_id": "red_hat_enterprise_linux_6:curl"
},
"product_reference": "curl",
"relates_to_product_reference": "red_hat_enterprise_linux_6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl.src as a component of Red Hat Enterprise Linux 6",
"product_id": "red_hat_enterprise_linux_6:curl.src"
},
"product_reference": "curl.src",
"relates_to_product_reference": "red_hat_enterprise_linux_6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl as a component of Red Hat Enterprise Linux 6",
"product_id": "red_hat_enterprise_linux_6:libcurl"
},
"product_reference": "libcurl",
"relates_to_product_reference": "red_hat_enterprise_linux_6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel as a component of Red Hat Enterprise Linux 6",
"product_id": "red_hat_enterprise_linux_6:libcurl-devel"
},
"product_reference": "libcurl-devel",
"relates_to_product_reference": "red_hat_enterprise_linux_6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:curl"
},
"product_reference": "curl",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl.src as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:curl.src"
},
"product_reference": "curl.src",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:libcurl"
},
"product_reference": "libcurl",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:libcurl-devel"
},
"product_reference": "libcurl-devel",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-8.0 as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:aspnetcore-runtime-8.0"
},
"product_reference": "aspnetcore-runtime-8.0",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-8.0 as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:aspnetcore-runtime-dbg-8.0"
},
"product_reference": "aspnetcore-runtime-dbg-8.0",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-8.0 as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:aspnetcore-targeting-pack-8.0"
},
"product_reference": "aspnetcore-targeting-pack-8.0",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:curl"
},
"product_reference": "curl",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl.src as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:curl.src"
},
"product_reference": "curl.src",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:dotnet"
},
"product_reference": "dotnet",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0 as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:dotnet-apphost-pack-8.0"
},
"product_reference": "dotnet-apphost-pack-8.0",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:dotnet-host"
},
"product_reference": "dotnet-host",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0 as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:dotnet-hostfxr-8.0"
},
"product_reference": "dotnet-hostfxr-8.0",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0 as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:dotnet-runtime-8.0"
},
"product_reference": "dotnet-runtime-8.0",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-8.0 as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:dotnet-runtime-dbg-8.0"
},
"product_reference": "dotnet-runtime-dbg-8.0",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0 as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:dotnet-sdk-8.0"
},
"product_reference": "dotnet-sdk-8.0",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-source-built-artifacts as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:dotnet-sdk-8.0-source-built-artifacts"
},
"product_reference": "dotnet-sdk-8.0-source-built-artifacts",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-8.0 as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:dotnet-sdk-dbg-8.0"
},
"product_reference": "dotnet-sdk-dbg-8.0",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-8.0 as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:dotnet-targeting-pack-8.0"
},
"product_reference": "dotnet-targeting-pack-8.0",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-8.0 as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:dotnet-templates-8.0"
},
"product_reference": "dotnet-templates-8.0",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0.src as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:dotnet8.0.src"
},
"product_reference": "dotnet8.0.src",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:libcurl"
},
"product_reference": "libcurl",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:libcurl-devel"
},
"product_reference": "libcurl-devel",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-minimal as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:libcurl-minimal"
},
"product_reference": "libcurl-minimal",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netstandard-targeting-pack-2.1 as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:netstandard-targeting-pack-2.1"
},
"product_reference": "netstandard-targeting-pack-2.1",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:cargo"
},
"product_reference": "cargo",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clippy as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:clippy"
},
"product_reference": "clippy",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:curl"
},
"product_reference": "curl",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-minimal as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:curl-minimal"
},
"product_reference": "curl-minimal",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl.src as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:curl.src"
},
"product_reference": "curl.src",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:libcurl"
},
"product_reference": "libcurl",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:libcurl-devel"
},
"product_reference": "libcurl-devel",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-minimal as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:libcurl-minimal"
},
"product_reference": "libcurl-minimal",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust"
},
"product_reference": "rust",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-analysis as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust-analysis"
},
"product_reference": "rust-analysis",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-analyzer as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust-analyzer"
},
"product_reference": "rust-analyzer",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-debugger-common as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust-debugger-common"
},
"product_reference": "rust-debugger-common",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-doc as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust-doc"
},
"product_reference": "rust-doc",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-gdb as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust-gdb"
},
"product_reference": "rust-gdb",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-lldb as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust-lldb"
},
"product_reference": "rust-lldb",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-src as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust-src"
},
"product_reference": "rust-src",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust-std-static"
},
"product_reference": "rust-std-static",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-wasm32-unknown-unknown as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust-std-static-wasm32-unknown-unknown"
},
"product_reference": "rust-std-static-wasm32-unknown-unknown",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-wasm32-wasi as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust-std-static-wasm32-wasi"
},
"product_reference": "rust-std-static-wasm32-wasi",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-toolset as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust-toolset"
},
"product_reference": "rust-toolset",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust.src as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust.src"
},
"product_reference": "rust.src",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rustfmt as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rustfmt"
},
"product_reference": "rustfmt",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "snphost.src as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:snphost.src"
},
"product_reference": "snphost.src",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trustee-guest-components.src as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:trustee-guest-components.src"
},
"product_reference": "trustee-guest-components.src",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust.src as a component of Red Hat Enterprise Linux AI (RHEL AI) 3",
"product_id": "red_hat_enterprise_linux_ai_(rhel_ai)_3:rust.src"
},
"product_reference": "rust.src",
"relates_to_product_reference": "red_hat_enterprise_linux_ai_(rhel_ai)_3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-1.dll as a component of Red Hat JBoss Core Services",
"product_id": "red_hat_jboss_core_services:libcurl-1.dll"
},
"product_reference": "libcurl-1.dll",
"relates_to_product_reference": "red_hat_jboss_core_services"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl.so as a component of Red Hat JBoss Core Services",
"product_id": "red_hat_jboss_core_services:libcurl.so"
},
"product_reference": "libcurl.so",
"relates_to_product_reference": "red_hat_jboss_core_services"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4",
"product_id": "red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-8"
},
"product_reference": "openshift/ose-rhel-coreos-8",
"relates_to_product_reference": "red_hat_openshift_container_platform_4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4",
"product_id": "red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-9"
},
"product_reference": "openshift/ose-rhel-coreos-9",
"relates_to_product_reference": "red_hat_openshift_container_platform_4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "devspaces/code-rhel9 as a component of Red Hat OpenShift Dev Spaces",
"product_id": "red_hat_openshift_dev_spaces:devspaces/code-rhel9"
},
"product_reference": "devspaces/code-rhel9",
"relates_to_product_reference": "red_hat_openshift_dev_spaces"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhtpa/rhtpa-trustification-service-rhel9 as a component of Red Hat Trusted Profile Analyzer",
"product_id": "red_hat_trusted_profile_analyzer:rhtpa/rhtpa-trustification-service-rhel9"
},
"product_reference": "rhtpa/rhtpa-trustification-service-rhel9",
"relates_to_product_reference": "red_hat_trusted_profile_analyzer"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-9080",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-07-03T07:01:03.085521+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"red_hat_enterprise_linux_10:curl",
"red_hat_enterprise_linux_10:curl.src",
"red_hat_enterprise_linux_10:libcurl",
"red_hat_enterprise_linux_10:libcurl-devel",
"red_hat_enterprise_linux_10:libcurl-minimal",
"red_hat_enterprise_linux_6:curl",
"red_hat_enterprise_linux_6:curl.src",
"red_hat_enterprise_linux_6:libcurl",
"red_hat_enterprise_linux_6:libcurl-devel",
"red_hat_enterprise_linux_7:curl",
"red_hat_enterprise_linux_7:curl.src",
"red_hat_enterprise_linux_7:libcurl",
"red_hat_enterprise_linux_7:libcurl-devel",
"red_hat_enterprise_linux_8:curl",
"red_hat_enterprise_linux_8:curl.src",
"red_hat_enterprise_linux_8:libcurl",
"red_hat_enterprise_linux_8:libcurl-devel",
"red_hat_enterprise_linux_8:libcurl-minimal",
"red_hat_enterprise_linux_9:curl",
"red_hat_enterprise_linux_9:curl-minimal",
"red_hat_enterprise_linux_9:curl.src",
"red_hat_enterprise_linux_9:libcurl",
"red_hat_enterprise_linux_9:libcurl-devel",
"red_hat_enterprise_linux_9:libcurl-minimal",
"red_hat_jboss_core_services:libcurl-1.dll",
"red_hat_jboss_core_services:libcurl.so"
]
},
{
"label": "component_not_present",
"product_ids": [
"red_hat_enterprise_linux_8:aspnetcore-runtime-8.0",
"red_hat_enterprise_linux_8:aspnetcore-runtime-dbg-8.0",
"red_hat_enterprise_linux_8:aspnetcore-targeting-pack-8.0",
"red_hat_enterprise_linux_8:dotnet",
"red_hat_enterprise_linux_8:dotnet-apphost-pack-8.0",
"red_hat_enterprise_linux_8:dotnet-host",
"red_hat_enterprise_linux_8:dotnet-hostfxr-8.0",
"red_hat_enterprise_linux_8:dotnet-runtime-8.0",
"red_hat_enterprise_linux_8:dotnet-runtime-dbg-8.0",
"red_hat_enterprise_linux_8:dotnet-sdk-8.0",
"red_hat_enterprise_linux_8:dotnet-sdk-8.0-source-built-artifacts",
"red_hat_enterprise_linux_8:dotnet-sdk-dbg-8.0",
"red_hat_enterprise_linux_8:dotnet-targeting-pack-8.0",
"red_hat_enterprise_linux_8:dotnet-templates-8.0",
"red_hat_enterprise_linux_8:dotnet8.0.src",
"red_hat_enterprise_linux_8:netstandard-targeting-pack-2.1"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2496755"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libcurl. When `curl_easy_pause()` is called within the event-based `CURLMOPT_SOCKETFUNCTION` callback, a use-after-free vulnerability is triggered. This occurs because libcurl attempts to store a flag using a pointer to memory that has already been freed. An attacker could potentially exploit this to cause a denial of service or execute arbitrary code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libcurl: libcurl: Use-after-free via curl_easy_pause() in CURLMOPT_SOCKETFUNCTION callback",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in libcurl stems from a use-after-free vulnerability when `curl_easy_pause()` is called within the `CURLMOPT_SOCKETFUNCTION` callback. This could allow an attacker to achieve denial of service or arbitrary code execution without requiring user interaction or elevated privileges. While dependent on a specific application implementation, the broad adoption of libcurl means Red Hat products leveraging this callback pattern could be affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64",
"Red Hat Hardened Images:rust-main@aarch64",
"Red Hat Hardened Images:rust-main@noarch",
"Red Hat Hardened Images:rust-main@src",
"Red Hat Hardened Images:rust-main@x86_64"
],
"known_not_affected": [
"red_hat_enterprise_linux_10:curl",
"red_hat_enterprise_linux_10:curl.src",
"red_hat_enterprise_linux_10:libcurl",
"red_hat_enterprise_linux_10:libcurl-devel",
"red_hat_enterprise_linux_10:libcurl-minimal",
"red_hat_enterprise_linux_6:curl",
"red_hat_enterprise_linux_6:curl.src",
"red_hat_enterprise_linux_6:libcurl",
"red_hat_enterprise_linux_6:libcurl-devel",
"red_hat_enterprise_linux_7:curl",
"red_hat_enterprise_linux_7:curl.src",
"red_hat_enterprise_linux_7:libcurl",
"red_hat_enterprise_linux_7:libcurl-devel",
"red_hat_enterprise_linux_8:aspnetcore-runtime-8.0",
"red_hat_enterprise_linux_8:aspnetcore-runtime-dbg-8.0",
"red_hat_enterprise_linux_8:aspnetcore-targeting-pack-8.0",
"red_hat_enterprise_linux_8:curl",
"red_hat_enterprise_linux_8:curl.src",
"red_hat_enterprise_linux_8:dotnet",
"red_hat_enterprise_linux_8:dotnet-apphost-pack-8.0",
"red_hat_enterprise_linux_8:dotnet-host",
"red_hat_enterprise_linux_8:dotnet-hostfxr-8.0",
"red_hat_enterprise_linux_8:dotnet-runtime-8.0",
"red_hat_enterprise_linux_8:dotnet-runtime-dbg-8.0",
"red_hat_enterprise_linux_8:dotnet-sdk-8.0",
"red_hat_enterprise_linux_8:dotnet-sdk-8.0-source-built-artifacts",
"red_hat_enterprise_linux_8:dotnet-sdk-dbg-8.0",
"red_hat_enterprise_linux_8:dotnet-targeting-pack-8.0",
"red_hat_enterprise_linux_8:dotnet-templates-8.0",
"red_hat_enterprise_linux_8:dotnet8.0.src",
"red_hat_enterprise_linux_8:libcurl",
"red_hat_enterprise_linux_8:libcurl-devel",
"red_hat_enterprise_linux_8:libcurl-minimal",
"red_hat_enterprise_linux_8:netstandard-targeting-pack-2.1",
"red_hat_enterprise_linux_9:curl",
"red_hat_enterprise_linux_9:curl-minimal",
"red_hat_enterprise_linux_9:curl.src",
"red_hat_enterprise_linux_9:libcurl",
"red_hat_enterprise_linux_9:libcurl-devel",
"red_hat_enterprise_linux_9:libcurl-minimal",
"red_hat_jboss_core_services:libcurl-1.dll",
"red_hat_jboss_core_services:libcurl.so"
],
"under_investigation": [
"confidential_compute_attestation:build-of-trustee/trustee-rhel9",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-podvm-payload-rhel9",
"red_hat_enterprise_linux_10:cargo",
"red_hat_enterprise_linux_10:clippy",
"red_hat_enterprise_linux_10:igvm.src",
"red_hat_enterprise_linux_10:rust-analyzer",
"red_hat_enterprise_linux_10:rust-debugger-common",
"red_hat_enterprise_linux_10:rust-doc",
"red_hat_enterprise_linux_10:rust-gdb",
"red_hat_enterprise_linux_10:rust-lldb",
"red_hat_enterprise_linux_10:rust-src",
"red_hat_enterprise_linux_10:rust-std-static",
"red_hat_enterprise_linux_10:rust-std-static-aarch64-unknown-none-softfloat",
"red_hat_enterprise_linux_10:rust-std-static-wasm32-unknown-unknown",
"red_hat_enterprise_linux_10:rust-std-static-wasm32-wasip1",
"red_hat_enterprise_linux_10:rust-std-static-x86_64-unknown-none",
"red_hat_enterprise_linux_10:rust-toolset",
"red_hat_enterprise_linux_10:rust-toolset-srpm-macros",
"red_hat_enterprise_linux_10:rust.src",
"red_hat_enterprise_linux_10:rustfmt",
"red_hat_enterprise_linux_10:s390utils-base",
"red_hat_enterprise_linux_10:s390utils-chreipl-fcp-mpath",
"red_hat_enterprise_linux_10:s390utils-cmsfs-fuse",
"red_hat_enterprise_linux_10:s390utils-core",
"red_hat_enterprise_linux_10:s390utils-cpacfstatsd",
"red_hat_enterprise_linux_10:s390utils-cpuplugd",
"red_hat_enterprise_linux_10:s390utils-devel",
"red_hat_enterprise_linux_10:s390utils-hmcdrvfs",
"red_hat_enterprise_linux_10:s390utils-iucvterm",
"red_hat_enterprise_linux_10:s390utils-mon_statd",
"red_hat_enterprise_linux_10:s390utils-osasnmpd",
"red_hat_enterprise_linux_10:s390utils-se-data",
"red_hat_enterprise_linux_10:s390utils-zdsfs",
"red_hat_enterprise_linux_10:s390utils-ziomon",
"red_hat_enterprise_linux_10:s390utils.src",
"red_hat_enterprise_linux_10:snphost.src",
"red_hat_enterprise_linux_10:trustee-guest-components.src",
"red_hat_enterprise_linux_10:trustee-kbs",
"red_hat_enterprise_linux_9:cargo",
"red_hat_enterprise_linux_9:clippy",
"red_hat_enterprise_linux_9:rust",
"red_hat_enterprise_linux_9:rust-analysis",
"red_hat_enterprise_linux_9:rust-analyzer",
"red_hat_enterprise_linux_9:rust-debugger-common",
"red_hat_enterprise_linux_9:rust-doc",
"red_hat_enterprise_linux_9:rust-gdb",
"red_hat_enterprise_linux_9:rust-lldb",
"red_hat_enterprise_linux_9:rust-src",
"red_hat_enterprise_linux_9:rust-std-static",
"red_hat_enterprise_linux_9:rust-std-static-wasm32-unknown-unknown",
"red_hat_enterprise_linux_9:rust-std-static-wasm32-wasi",
"red_hat_enterprise_linux_9:rust-toolset",
"red_hat_enterprise_linux_9:rust.src",
"red_hat_enterprise_linux_9:rustfmt",
"red_hat_enterprise_linux_9:snphost.src",
"red_hat_enterprise_linux_9:trustee-guest-components.src",
"red_hat_enterprise_linux_ai_(rhel_ai)_3:rust.src",
"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-8",
"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-9",
"red_hat_openshift_dev_spaces:devspaces/code-rhel9",
"red_hat_trusted_profile_analyzer:rhtpa/rhtpa-trustification-service-rhel9"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9080"
},
{
"category": "external",
"summary": "RHBZ#2496755",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496755"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9080",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9080"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9080",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9080"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-9080.html",
"url": "https://curl.se/docs/CVE-2026-9080.html"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-9080.json",
"url": "https://curl.se/docs/CVE-2026-9080.json"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/3749204",
"url": "https://hackerone.com/reports/3749204"
}
],
"release_date": "2026-07-03T06:17:34.905000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T12:18:38+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64"
],
"url": "https://access.redhat.com/errata/RHSA-2026:29017"
},
{
"category": "vendor_fix",
"date": "2026-07-02T15:43:28+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:rust-main@aarch64",
"Red Hat Hardened Images:rust-main@noarch",
"Red Hat Hardened Images:rust-main@src",
"Red Hat Hardened Images:rust-main@x86_64"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34975"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64",
"Red Hat Hardened Images:rust-main@aarch64",
"Red Hat Hardened Images:rust-main@noarch",
"Red Hat Hardened Images:rust-main@src",
"Red Hat Hardened Images:rust-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64",
"Red Hat Hardened Images:rust-main@aarch64",
"Red Hat Hardened Images:rust-main@noarch",
"Red Hat Hardened Images:rust-main@src",
"Red Hat Hardened Images:rust-main@x86_64",
"confidential_compute_attestation:build-of-trustee/trustee-rhel9",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-podvm-payload-rhel9",
"red_hat_enterprise_linux_10:cargo",
"red_hat_enterprise_linux_10:clippy",
"red_hat_enterprise_linux_10:curl",
"red_hat_enterprise_linux_10:curl.src",
"red_hat_enterprise_linux_10:igvm.src",
"red_hat_enterprise_linux_10:libcurl",
"red_hat_enterprise_linux_10:libcurl-devel",
"red_hat_enterprise_linux_10:libcurl-minimal",
"red_hat_enterprise_linux_10:rust-analyzer",
"red_hat_enterprise_linux_10:rust-debugger-common",
"red_hat_enterprise_linux_10:rust-doc",
"red_hat_enterprise_linux_10:rust-gdb",
"red_hat_enterprise_linux_10:rust-lldb",
"red_hat_enterprise_linux_10:rust-src",
"red_hat_enterprise_linux_10:rust-std-static",
"red_hat_enterprise_linux_10:rust-std-static-aarch64-unknown-none-softfloat",
"red_hat_enterprise_linux_10:rust-std-static-wasm32-unknown-unknown",
"red_hat_enterprise_linux_10:rust-std-static-wasm32-wasip1",
"red_hat_enterprise_linux_10:rust-std-static-x86_64-unknown-none",
"red_hat_enterprise_linux_10:rust-toolset",
"red_hat_enterprise_linux_10:rust-toolset-srpm-macros",
"red_hat_enterprise_linux_10:rust.src",
"red_hat_enterprise_linux_10:rustfmt",
"red_hat_enterprise_linux_10:s390utils-base",
"red_hat_enterprise_linux_10:s390utils-chreipl-fcp-mpath",
"red_hat_enterprise_linux_10:s390utils-cmsfs-fuse",
"red_hat_enterprise_linux_10:s390utils-core",
"red_hat_enterprise_linux_10:s390utils-cpacfstatsd",
"red_hat_enterprise_linux_10:s390utils-cpuplugd",
"red_hat_enterprise_linux_10:s390utils-devel",
"red_hat_enterprise_linux_10:s390utils-hmcdrvfs",
"red_hat_enterprise_linux_10:s390utils-iucvterm",
"red_hat_enterprise_linux_10:s390utils-mon_statd",
"red_hat_enterprise_linux_10:s390utils-osasnmpd",
"red_hat_enterprise_linux_10:s390utils-se-data",
"red_hat_enterprise_linux_10:s390utils-zdsfs",
"red_hat_enterprise_linux_10:s390utils-ziomon",
"red_hat_enterprise_linux_10:s390utils.src",
"red_hat_enterprise_linux_10:snphost.src",
"red_hat_enterprise_linux_10:trustee-guest-components.src",
"red_hat_enterprise_linux_10:trustee-kbs",
"red_hat_enterprise_linux_6:curl",
"red_hat_enterprise_linux_6:curl.src",
"red_hat_enterprise_linux_6:libcurl",
"red_hat_enterprise_linux_6:libcurl-devel",
"red_hat_enterprise_linux_7:curl",
"red_hat_enterprise_linux_7:curl.src",
"red_hat_enterprise_linux_7:libcurl",
"red_hat_enterprise_linux_7:libcurl-devel",
"red_hat_enterprise_linux_8:aspnetcore-runtime-8.0",
"red_hat_enterprise_linux_8:aspnetcore-runtime-dbg-8.0",
"red_hat_enterprise_linux_8:aspnetcore-targeting-pack-8.0",
"red_hat_enterprise_linux_8:curl",
"red_hat_enterprise_linux_8:curl.src",
"red_hat_enterprise_linux_8:dotnet",
"red_hat_enterprise_linux_8:dotnet-apphost-pack-8.0",
"red_hat_enterprise_linux_8:dotnet-host",
"red_hat_enterprise_linux_8:dotnet-hostfxr-8.0",
"red_hat_enterprise_linux_8:dotnet-runtime-8.0",
"red_hat_enterprise_linux_8:dotnet-runtime-dbg-8.0",
"red_hat_enterprise_linux_8:dotnet-sdk-8.0",
"red_hat_enterprise_linux_8:dotnet-sdk-8.0-source-built-artifacts",
"red_hat_enterprise_linux_8:dotnet-sdk-dbg-8.0",
"red_hat_enterprise_linux_8:dotnet-targeting-pack-8.0",
"red_hat_enterprise_linux_8:dotnet-templates-8.0",
"red_hat_enterprise_linux_8:dotnet8.0.src",
"red_hat_enterprise_linux_8:libcurl",
"red_hat_enterprise_linux_8:libcurl-devel",
"red_hat_enterprise_linux_8:libcurl-minimal",
"red_hat_enterprise_linux_8:netstandard-targeting-pack-2.1",
"red_hat_enterprise_linux_9:cargo",
"red_hat_enterprise_linux_9:clippy",
"red_hat_enterprise_linux_9:curl",
"red_hat_enterprise_linux_9:curl-minimal",
"red_hat_enterprise_linux_9:curl.src",
"red_hat_enterprise_linux_9:libcurl",
"red_hat_enterprise_linux_9:libcurl-devel",
"red_hat_enterprise_linux_9:libcurl-minimal",
"red_hat_enterprise_linux_9:rust",
"red_hat_enterprise_linux_9:rust-analysis",
"red_hat_enterprise_linux_9:rust-analyzer",
"red_hat_enterprise_linux_9:rust-debugger-common",
"red_hat_enterprise_linux_9:rust-doc",
"red_hat_enterprise_linux_9:rust-gdb",
"red_hat_enterprise_linux_9:rust-lldb",
"red_hat_enterprise_linux_9:rust-src",
"red_hat_enterprise_linux_9:rust-std-static",
"red_hat_enterprise_linux_9:rust-std-static-wasm32-unknown-unknown",
"red_hat_enterprise_linux_9:rust-std-static-wasm32-wasi",
"red_hat_enterprise_linux_9:rust-toolset",
"red_hat_enterprise_linux_9:rust.src",
"red_hat_enterprise_linux_9:rustfmt",
"red_hat_enterprise_linux_9:snphost.src",
"red_hat_enterprise_linux_9:trustee-guest-components.src",
"red_hat_enterprise_linux_ai_(rhel_ai)_3:rust.src",
"red_hat_jboss_core_services:libcurl-1.dll",
"red_hat_jboss_core_services:libcurl.so",
"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-8",
"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-9",
"red_hat_openshift_dev_spaces:devspaces/code-rhel9",
"red_hat_trusted_profile_analyzer:rhtpa/rhtpa-trustification-service-rhel9"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate",
"product_ids": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64",
"Red Hat Hardened Images:rust-main@aarch64",
"Red Hat Hardened Images:rust-main@noarch",
"Red Hat Hardened Images:rust-main@src",
"Red Hat Hardened Images:rust-main@x86_64",
"confidential_compute_attestation:build-of-trustee/trustee-rhel9",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-podvm-payload-rhel9",
"red_hat_enterprise_linux_10:cargo",
"red_hat_enterprise_linux_10:clippy",
"red_hat_enterprise_linux_10:curl",
"red_hat_enterprise_linux_10:curl.src",
"red_hat_enterprise_linux_10:igvm.src",
"red_hat_enterprise_linux_10:libcurl",
"red_hat_enterprise_linux_10:libcurl-devel",
"red_hat_enterprise_linux_10:libcurl-minimal",
"red_hat_enterprise_linux_10:rust-analyzer",
"red_hat_enterprise_linux_10:rust-debugger-common",
"red_hat_enterprise_linux_10:rust-doc",
"red_hat_enterprise_linux_10:rust-gdb",
"red_hat_enterprise_linux_10:rust-lldb",
"red_hat_enterprise_linux_10:rust-src",
"red_hat_enterprise_linux_10:rust-std-static",
"red_hat_enterprise_linux_10:rust-std-static-aarch64-unknown-none-softfloat",
"red_hat_enterprise_linux_10:rust-std-static-wasm32-unknown-unknown",
"red_hat_enterprise_linux_10:rust-std-static-wasm32-wasip1",
"red_hat_enterprise_linux_10:rust-std-static-x86_64-unknown-none",
"red_hat_enterprise_linux_10:rust-toolset",
"red_hat_enterprise_linux_10:rust-toolset-srpm-macros",
"red_hat_enterprise_linux_10:rust.src",
"red_hat_enterprise_linux_10:rustfmt",
"red_hat_enterprise_linux_10:s390utils-base",
"red_hat_enterprise_linux_10:s390utils-chreipl-fcp-mpath",
"red_hat_enterprise_linux_10:s390utils-cmsfs-fuse",
"red_hat_enterprise_linux_10:s390utils-core",
"red_hat_enterprise_linux_10:s390utils-cpacfstatsd",
"red_hat_enterprise_linux_10:s390utils-cpuplugd",
"red_hat_enterprise_linux_10:s390utils-devel",
"red_hat_enterprise_linux_10:s390utils-hmcdrvfs",
"red_hat_enterprise_linux_10:s390utils-iucvterm",
"red_hat_enterprise_linux_10:s390utils-mon_statd",
"red_hat_enterprise_linux_10:s390utils-osasnmpd",
"red_hat_enterprise_linux_10:s390utils-se-data",
"red_hat_enterprise_linux_10:s390utils-zdsfs",
"red_hat_enterprise_linux_10:s390utils-ziomon",
"red_hat_enterprise_linux_10:s390utils.src",
"red_hat_enterprise_linux_10:snphost.src",
"red_hat_enterprise_linux_10:trustee-guest-components.src",
"red_hat_enterprise_linux_10:trustee-kbs",
"red_hat_enterprise_linux_6:curl",
"red_hat_enterprise_linux_6:curl.src",
"red_hat_enterprise_linux_6:libcurl",
"red_hat_enterprise_linux_6:libcurl-devel",
"red_hat_enterprise_linux_7:curl",
"red_hat_enterprise_linux_7:curl.src",
"red_hat_enterprise_linux_7:libcurl",
"red_hat_enterprise_linux_7:libcurl-devel",
"red_hat_enterprise_linux_8:aspnetcore-runtime-8.0",
"red_hat_enterprise_linux_8:aspnetcore-runtime-dbg-8.0",
"red_hat_enterprise_linux_8:aspnetcore-targeting-pack-8.0",
"red_hat_enterprise_linux_8:curl",
"red_hat_enterprise_linux_8:curl.src",
"red_hat_enterprise_linux_8:dotnet",
"red_hat_enterprise_linux_8:dotnet-apphost-pack-8.0",
"red_hat_enterprise_linux_8:dotnet-host",
"red_hat_enterprise_linux_8:dotnet-hostfxr-8.0",
"red_hat_enterprise_linux_8:dotnet-runtime-8.0",
"red_hat_enterprise_linux_8:dotnet-runtime-dbg-8.0",
"red_hat_enterprise_linux_8:dotnet-sdk-8.0",
"red_hat_enterprise_linux_8:dotnet-sdk-8.0-source-built-artifacts",
"red_hat_enterprise_linux_8:dotnet-sdk-dbg-8.0",
"red_hat_enterprise_linux_8:dotnet-targeting-pack-8.0",
"red_hat_enterprise_linux_8:dotnet-templates-8.0",
"red_hat_enterprise_linux_8:dotnet8.0.src",
"red_hat_enterprise_linux_8:libcurl",
"red_hat_enterprise_linux_8:libcurl-devel",
"red_hat_enterprise_linux_8:libcurl-minimal",
"red_hat_enterprise_linux_8:netstandard-targeting-pack-2.1",
"red_hat_enterprise_linux_9:cargo",
"red_hat_enterprise_linux_9:clippy",
"red_hat_enterprise_linux_9:curl",
"red_hat_enterprise_linux_9:curl-minimal",
"red_hat_enterprise_linux_9:curl.src",
"red_hat_enterprise_linux_9:libcurl",
"red_hat_enterprise_linux_9:libcurl-devel",
"red_hat_enterprise_linux_9:libcurl-minimal",
"red_hat_enterprise_linux_9:rust",
"red_hat_enterprise_linux_9:rust-analysis",
"red_hat_enterprise_linux_9:rust-analyzer",
"red_hat_enterprise_linux_9:rust-debugger-common",
"red_hat_enterprise_linux_9:rust-doc",
"red_hat_enterprise_linux_9:rust-gdb",
"red_hat_enterprise_linux_9:rust-lldb",
"red_hat_enterprise_linux_9:rust-src",
"red_hat_enterprise_linux_9:rust-std-static",
"red_hat_enterprise_linux_9:rust-std-static-wasm32-unknown-unknown",
"red_hat_enterprise_linux_9:rust-std-static-wasm32-wasi",
"red_hat_enterprise_linux_9:rust-toolset",
"red_hat_enterprise_linux_9:rust.src",
"red_hat_enterprise_linux_9:rustfmt",
"red_hat_enterprise_linux_9:snphost.src",
"red_hat_enterprise_linux_9:trustee-guest-components.src",
"red_hat_enterprise_linux_ai_(rhel_ai)_3:rust.src",
"red_hat_jboss_core_services:libcurl-1.dll",
"red_hat_jboss_core_services:libcurl.so",
"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-8",
"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-9",
"red_hat_openshift_dev_spaces:devspaces/code-rhel9",
"red_hat_trusted_profile_analyzer:rhtpa/rhtpa-trustification-service-rhel9"
]
}
],
"title": "libcurl: libcurl: Use-after-free via curl_easy_pause() in CURLMOPT_SOCKETFUNCTION callback"
}
]
}
Enrichment data
Aggregated bundle (all enrichments)