BlackTreeIndependent security intelligence
← Back to the CVE catalogue
Full vulnerability report · 2026
CVE-2026-33748High confidence

BuildKit Git URL subdir component can cause access to restricted files

moby · buildkit

8.2HighCVSS 4.0
Recommended action
Within 7 days

High technical severity; prioritise exposed affected systems while verifying vendor guidance.

Patch available
Distribution package intelligence

Ubuntu vendor package status

Canonical’s release and source-package findings are shown separately from local repository availability.

2 package states
Repository candidate not checked

A published vendor fix does not prove that a matching update is enabled and installable on a particular asset. Confirm the local package candidate before scheduling remediation.

Ubuntu releaseSource packageVendor stateFixed versionEvidence
Ubuntu 24.04 LTSnoble · esm-appsdocker.ioUnder evaluationCanonical reports that the package might be affected and still needs evaluation or fixing.Not published in this feedCanonical record ↗Source updated 8 Sept 2026
Ubuntu 24.04 LTSnoble · standard archivedocker.io-appVendor fix publishedCanonical reports that a fixed source package version has been published. Repository candidate availability is not checked by BlackTree.29.1.3-0ubuntu3~24.04.2Canonical record ↗Source updated 8 Sept 2026
Direct vendor intelligence

Authoritative vendor CSAF and VEX advisories

Structured product status and remediation from the issuing vendor. Product-state explanations are always visible; large lists can be searched or downloaded.

1 current
CVE-2026-33748 · CSAF 2.0 · revision 3 · finalRed Hat Product Securitygithub.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components
40 known affected

The vendor explicitly identifies these products as affected by this CVE.

  • assisted/agent-preinstall-image-builder-rhel9 as a component of Assisted Installer for Red Hat OpenShift Container Platform 2
  • openshift-sandboxed-containers/osc-must-gather-rhel9 as a component of Confidential Compute Attestation
  • rhmtc/openshift-migration-log-reader-rhel8 as a component of Migration Toolkit for Containers
  • rhmtc/openshift-migration-must-gather-rhel8 as a component of Migration Toolkit for Containers
  • migration-toolkit-virtualization/mtv-must-gather-rhel8 as a component of Migration Toolkit for Virtualization
  • mtv-candidate/mtv-must-gather-rhel8 as a component of Migration Toolkit for Virtualization
  • openshift-serverless-1/kn-client-kn-rhel9 as a component of OpenShift Serverless
  • openshift-serverless-1/kn-plugin-func-func-util-rhel9 as a component of OpenShift Serverless
  • openshift-serverless-1/serverless-must-gather-rhel9 as a component of OpenShift Serverless
  • podman-desktop-macos-1-0 as a component of Red Hat Build of Podman Desktop
  • podman-desktop-windows-1-0 as a component of Red Hat Build of Podman Desktop
  • rhdesktop/rh-podman-desktop-ext-bootc-rhel10 as a component of Red Hat Build of Podman Desktop - Tech Preview
Summary
A flaw was found in BuildKit. Insufficient validation of Git URL fragment subdirectory components may allow a remote attacker to access files outside the checked-out Git repository root. This access is limited to files on the same mounted filesystem. This vulnerability could lead to unauthorized information disclosure.
Remediation
Before applying this update, make sure all previously released errata relevant to your system have been applied.
Optional official sources

National CERT insights
?CERT means Computer Emergency Response Team; CSIRT is the closely related term Computer Security Incident Response Team.

Select the national-authority views to include. The exact source language is shown on each matched advisory. Your choice is remembered on this device and encoded in the shareable URL.

Official European source

ENISA European Vulnerability Database

Official EUVD identifiers, advisory evidence and known-exploited context. Missing fields are not treated as evidence of low risk.

1 current
ENISA EUVD identifier

EUVD-2026-16618

No EUVD known-exploited evidence

ENISA has published the identifier mapping but no EUVD description has been stored yet.

EUVD state
Present in the current official mapping
Known exploitation
Not present in the current ENISA EUVD known-exploited dataset. This is not proof of no exploitation.
ENISA score
Not supplied in the stored EUVD record
Advisory evidence
No linked advisory details stored yet
Recommended actionWithin 7 days

High technical severity; prioritise exposed affected systems while verifying vendor guidance.

Patch available
01

What, why and how

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to version 0.28.1, insufficient validation of Git URL fragment subdir components may allow access to files outside the checked-out Git repository root. Possible access is limited to files on the same mounted filesystem. The issue has been fixed in version v0.28.1 The issue affects only builds that use Git URLs with a subpath component. As a workaround, avoid building Dockerfiles from untrusted sources or using the subdir component from an untrusted Git repository where the subdir component could point to a symlink.

What

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to version 0.28.1, insufficient validation of Git URL fragment subdir components may allow access to files outside the checked-out Git repository root. Possible access is limited to files on the same mounted filesystem. The issue has been fixed in version v0.28.1 The issue affects only builds that use Git URLs with a subpath component. As a workaround, avoid building Dockerfiles from untrusted sources or using the subdir component from an untrusted Git repository where the subdir component could point to a symlink.

Why

Attacker-controlled path data is not constrained to the intended directory before the application accesses a file.

How

An attacker operating through a network path may attempt exploitation without authentication or user interaction. If successful, the issue may cause the confidentiality, integrity or availability impact described by the vendor.

What

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to version 0.28.1, insufficient validation of Git URL fragment subdir components may allow access to files outside the checked-out Git repository root. Possible access is limited to files on the same mounted filesystem. The issue has been fixed in version v0.28.1 The issue affects only builds that use Git URLs with a subpath component. As a workaround, avoid building Dockerfiles from untrusted sources or using the subdir component from an untrusted Git repository where the subdir component could point to a symlink.

Why

Attacker-controlled path data is not constrained to the intended directory before the application accesses a file.

How

An attacker operating through a network path may attempt exploitation without authentication or user interaction. If successful, the issue may cause the confidentiality, integrity or availability impact described by the vendor.

02

Exploit reality and attack path

CVSS severity, EPSS forecast probability, public exploit material and CISA-confirmed exploitation are separate signals.

Observed exploitation
?Confirmed exploitation and public exploit material are separate signals. Attacks can occur without public proof-of-concept or exploit code.
No confirmed evidence

No CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.

Public PoC / exploit material
?Confirmed exploitation and public exploit material are separate signals. Attacks can occur without public proof-of-concept or exploit code.
None recorded

No exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.

Likely attack path
a network path → Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') → cause the confidentiality, integrity or availability impact described by the vendor
Attack surface
Network
Privileges required
None: unauthenticated exploitation is possible
User interaction
None
Attack complexity
Low: no specialised conditions are recorded
Security boundary
Not a CVSS 4.0 base metric
Weakness
?CWE means Common Weakness Enumeration: a standard category for the underlying weakness.
CWE-22

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'). The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

CVSS vector
?CVSS means Common Vulnerability Scoring System. The vector records the metric values used to calculate technical severity.
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Common Vulnerability Scoring System 4.0: the compact vector below is decoded into plain language.

AVNetworkAttack vector: The vulnerable component can be reached over a network.ACLowAttack complexity: No specialised conditions are required beyond attacker-controlled input.ATPresentAttack requirements: A particular deployment or execution condition must be present.PRNonePrivileges required: The attacker does not need an account or existing privileges.UINoneUser interaction: No action by another user is required.VCHighVulnerable-system confidentiality: A successful attack can cause a major loss.VINoneVulnerable-system integrity: No direct loss is represented by this metric.VANoneVulnerable-system availability: No direct loss is represented by this metric.SCNoneSubsequent-system confidentiality: No direct loss is represented by this metric.SINoneSubsequent-system integrity: No direct loss is represented by this metric.SANoneSubsequent-system availability: No direct loss is represented by this metric.
Post-exploitation / living off the land
No specific living-off-the-land technique is confirmed in the structured sources. Monitor normal administration tools for activity inconsistent with the affected service's baseline.
NetworkUnauthenticatedCWE-22
A

Official authority intelligence

Only matched European and national findings are included. Language selectors and unavailable sources are omitted.

BSI · German · WID-SEC-W-2026-0873docker: Mehrere Schwachstellen

Ein lokaler Angreifer kann mehrere Schwachstellen in docker ausnutzen, um Sicherheitsvorkehrungen zu umgehen und Informationen offenzulegen.

Official advisory
03

Patch and workaround

Operational remediation based on structured source evidence.

Status
?Patch availability is based on structured fixed-version fields and authoritative update references. If no fix is verified, check the vendor advisory before making a change.
Patch available
Affected
assisted/agent-preinstall-image-builder-rhel9 as a component of Assisted Installer for Red Hat OpenShift Container Platform 2; openshift-sandboxed-containers/osc-must-gather-rhel9 as a component of Confidential Compute Attestation; rhmtc/openshift-migration-log-reader-rhel8 as a component of Migration Toolkit for Containers; rhmtc/openshift-migration-must-gather-rhel8 as a component of Migration Toolkit for Containers; migration-toolkit-virtualization/mtv-must-gather-rhel8 as a component of Migration Toolkit for Virtualization; mtv-candidate/mtv-must-gather-rhel8 as a component of Migration Toolkit for Virtualization; openshift-serverless-1/kn-client-kn-rhel9 as a component of OpenShift Serverless; openshift-serverless-1/kn-plugin-func-func-util-rhel9 as a component of OpenShift Serverless; openshift-serverless-1/serverless-must-gather-rhel9 as a component of OpenShift Serverless; podman-desktop-macos-1-0 as a component of Red Hat Build of Podman Desktop; podman-desktop-windows-1-0 as a component of Red Hat Build of Podman Desktop; rhdesktop/rh-podman-desktop-ext-bootc-rhel10 as a component of Red Hat Build of Podman Desktop - Tech Preview; rhdesktop/rh-podman-desktop-ext-rhel-rhel10 as a component of Red Hat Build of Podman Desktop - Tech Preview; rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); and 10 more
Fixed
registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 as a component of OpenShift API for Data Protection 1.3; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 as a component of OpenShift API for Data Protection 1.3; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x as a component of OpenShift API for Data Protection 1.3; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le as a component of OpenShift API for Data Protection 1.3; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64 as a component of OpenShift API for Data Protection 1.4; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x as a component of OpenShift API for Data Protection 1.4; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64 as a component of OpenShift API for Data Protection 1.4; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le as a component of OpenShift API for Data Protection 1.4; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:15a5dc9571818879988dfdc824ee63fdde8b1e7eb60ea3a6a80e0f8d7e35f07c_arm64 as a component of OpenShift API for Data Protection 1.5; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:99ee1439b65c10715d8c68db82d34c940b35d49333e75206342c4071ac6b7ea9_s390x as a component of OpenShift API for Data Protection 1.5; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:ac6657db103d21fe3087af65ac5db65674808c076108e7e72d44f446a6c06fde_ppc64le as a component of OpenShift API for Data Protection 1.5; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f0eeb401ff9af1cf1a1ec7f675af1b971d333b1b9a060f733583a0505ef755d6_amd64 as a component of OpenShift API for Data Protection 1.5; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3113f8ef93a2abecad7ad6bd44d800c9c2735888b93f7a9b713ee93669fc3802_amd64 as a component of Red Hat OpenShift Service Mesh 3.0; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5f9b2a458158fbf02a611d8d2822c6425d186ce4cd73c091a097a3c0218f18ff_s390x as a component of Red Hat OpenShift Service Mesh 3.0; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2650c47f50206054063e8a62a8073d29a29808b21c2ab3d9964bd70995ff6eb_arm64 as a component of Red Hat OpenShift Service Mesh 3.0; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:e33cee7e3c778713dd44e3109609155061de98b83fbb91a89182179163ec05d4_ppc64le as a component of Red Hat OpenShift Service Mesh 3.0; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x as a component of Red Hat OpenShift Service Mesh 3.1; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64 as a component of Red Hat OpenShift Service Mesh 3.1; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64 as a component of Red Hat OpenShift Service Mesh 3.1; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64 as a component of Red Hat OpenShift Service Mesh 3.2; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x as a component of Red Hat OpenShift Service Mesh 3.2; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64 as a component of Red Hat OpenShift Service Mesh 3.2; registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:022f660bb0be440e9d99abf8815ede618710a390d315ccc79e9812a1c0f9ae02_arm64 as a component of Red Hat Openshift Data Foundation 4.22; registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1e55fe6360f7b5bce7d4ae524235b3ed5c8af0088b90c25c85dc8fe29319e777_ppc64le as a component of Red Hat Openshift Data Foundation 4.22; registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:9e492330bdada69efd431ecc370e3082fdd9366d2e5a00901f1101fb71fbaea5_amd64 as a component of Red Hat Openshift Data Foundation 4.22; registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:bdbd70d08ef6c7266a0a7cf0026192fffdb7c96a9bd13eec21a1046dc60ed54d_s390x as a component of Red Hat Openshift Data Foundation 4.22; registry.redhat.io/odf4/cephcsi-rhel9@sha256:05df2bcbadb214e4873082f282ef013565f04f24dce406d3802288d6ad574741_amd64 as a component of Red Hat Openshift Data Foundation 4.22; registry.redhat.io/odf4/cephcsi-rhel9@sha256:4d2215693809fd61f6d4d81333b41739fd7e34ad87fe79f9176db69c95265acb_s390x as a component of Red Hat Openshift Data Foundation 4.22; and 199 more
Action
Before applying this update, make sure all previously released errata relevant to your system have been applied.
Workaround
A mitigation or workaround reference is available from the source linked below; validate it against the affected product and version.
04

Evidence and provenance

Published 27 Mar 2026 · Last source change 27 Mar 2026, 19:58 UTC · CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVE recordCVE.org · 5.2
CVSS sourceCNA
EPSS source
?The date BlackTree first stored a score for this CVE from the daily FIRST EPSS feed.
FIRST · tracked since 2026-08-14
European sourceENISA EUVD · EUVD-2026-16618
Product sourceVendor CSAF · Red Hat Product Security
Remediation sourceVendor CSAF · Red Hat Product Security
CWE sourceCNA
NVD statusNVD enriched

Core structured fields are present and their contributing authorities are shown above.

Material change intelligence

What changed after publication

View recent updates →
  1. Affected versionsThe structured affected or fixed version information changed.
    Before
    assisted/agent-preinstall-image-builder-rhel9 as a component of Assisted Installer for Red Hat OpenShift Container Platform 2; openshift-sandboxed-containers/osc-must-gather-rhel9 as a component of Confidential Compute Attestation; rhmtc/openshift-migration-log-reader-rhel8 as a component of Migration Toolkit for Containers; rhmtc/openshift-migration-must-gather-rhel8 as a component of Migration Toolkit for Containers; migration-toolkit-virtualization/mtv-must-gather-rhel8 as a component of Migration Toolkit for Virtualization; mtv-candidate/mtv-must-gather-rhel8 as a component of Migration Toolkit for Virtualization; openshift-serverless-1/kn-client-kn-rhel9 as a component of OpenShift Serverless; openshift-serverless-1/kn-plugin-func-func-util-rhel9 as a component of OpenShift Serverless; openshift-serverless-1/serverless-must-gather-rhel9 as a component of OpenShift Serverless; podman-desktop-macos-1-0 as a component of Red Hat Build of Podman Desktop; podman-desktop-windows-1-0 as a component of Red Hat Build of Podman Desktop; rhdesktop/rh-podman-desktop-ext-bootc-rhel10 as a component of Red Hat Build of Podman Desktop - Tech Preview; rhdesktop/rh-podman-desktop-ext-rhel-rhel10 as a component of Red Hat Build of Podman Desktop - Tech Preview; rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); and 10 more · Fixed: registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 as a component of OpenShift API for Data Protection 1.3; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 as a component of OpenShift API for Data Protection 1.3; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x as a component of OpenShift API for Data Protection 1.3; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le as a component of OpenShift API for Data Protection 1.3; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64 as a component of OpenShift API for Data Protection 1.4; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x as a component of OpenShift API for Data Protection 1.4; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64 as a component of OpenShift API for Data Protection 1.4; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le as a component of OpenShift API for Data Protection 1.4; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:15a5dc9571818879988dfdc824ee63fdde8b1e7eb60ea3a6a80e0f8d7e35f07c_arm64 as a component of OpenShift API for Data Protection 1.5; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:99ee1439b65c10715d8c68db82d34c940b35d49333e75206342c4071ac6b7ea9_s390x as a component of OpenShift API for Data Protection 1.5; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:ac6657db103d21fe3087af65ac5db65674808c076108e7e72d44f446a6c06fde_ppc64le as a component of OpenShift API for Data Protection 1.5; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f0eeb401ff9af1cf1a1ec7f675af1b971d333b1b9a060f733583a0505ef755d6_amd64 as a component of OpenShift API for Data Protection 1.5; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3113f8ef93a2abecad7ad6bd44d800c9c2735888b93f7a9b713ee93669fc3802_amd64 as a component of Red Hat OpenShift Service Mesh 3.0; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5f9b2a458158fbf02a611d8d2822c6425d186ce4cd73c091a097a3c0218f18ff_s390x as a component of Red Hat OpenShift Service Mesh 3.0; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2650c47f50206054063e8a62a8073d29a29808b21c2ab3d9964bd70995ff6eb_arm64 as a component of Red Hat OpenShift Service Mesh 3.0; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:e33cee7e3c778713dd44e3109609155061de98b83fbb91a89182179163ec05d4_ppc64le as a component of Red Hat OpenShift Service Mesh 3.0; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x as a component of Red Hat OpenShift Service Mesh 3.1; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64 as a component of Red Hat OpenShift Service Mesh 3.1; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64 as a component of Red Hat OpenShift Service Mesh 3.1; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64 as a component of Red Hat OpenShift Service Mesh 3.2; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x as a component of Red Hat OpenShift Service Mesh 3.2; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64 as a component of Red Hat OpenShift Service Mesh 3.2; registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:2ddaea535655457fa0c0182edd49001701d57be7208567c25c09e513b105bba1_ppc64le as a component of Red Hat Openshift Data Foundation 4.20; registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:3afe44be9ca582caf9a9a87ee4a4aba0b649df8d7e268110ded40a6e684b7bcf_s390x as a component of Red Hat Openshift Data Foundation 4.20; registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:7757463b71023645bac40673d6684a7dcbc479e11ee19bf33f37daf2b950f98c_arm64 as a component of Red Hat Openshift Data Foundation 4.20; registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:ebc44b5e978f00be3360ae06bc28abff97237c7c0cde315f1d0835295e3c184f_amd64 as a component of Red Hat Openshift Data Foundation 4.20; registry.redhat.io/odf4/cephcsi-rhel9@sha256:729588270355013da1d18c819b5f00816fe9881bf20781e8c2214f1f367f9d2d_ppc64le as a component of Red Hat Openshift Data Foundation 4.20; registry.redhat.io/odf4/cephcsi-rhel9@sha256:80b189979e7cd53dd6ae95756e99eac30d0a9b9a9d252e8b06a8d9b9bfd57ec5_s390x as a component of Red Hat Openshift Data Foundation 4.20; and 199 more
    After
    assisted/agent-preinstall-image-builder-rhel9 as a component of Assisted Installer for Red Hat OpenShift Container Platform 2; openshift-sandboxed-containers/osc-must-gather-rhel9 as a component of Confidential Compute Attestation; rhmtc/openshift-migration-log-reader-rhel8 as a component of Migration Toolkit for Containers; rhmtc/openshift-migration-must-gather-rhel8 as a component of Migration Toolkit for Containers; migration-toolkit-virtualization/mtv-must-gather-rhel8 as a component of Migration Toolkit for Virtualization; mtv-candidate/mtv-must-gather-rhel8 as a component of Migration Toolkit for Virtualization; openshift-serverless-1/kn-client-kn-rhel9 as a component of OpenShift Serverless; openshift-serverless-1/kn-plugin-func-func-util-rhel9 as a component of OpenShift Serverless; openshift-serverless-1/serverless-must-gather-rhel9 as a component of OpenShift Serverless; podman-desktop-macos-1-0 as a component of Red Hat Build of Podman Desktop; podman-desktop-windows-1-0 as a component of Red Hat Build of Podman Desktop; rhdesktop/rh-podman-desktop-ext-bootc-rhel10 as a component of Red Hat Build of Podman Desktop - Tech Preview; rhdesktop/rh-podman-desktop-ext-rhel-rhel10 as a component of Red Hat Build of Podman Desktop - Tech Preview; rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); and 10 more · Fixed: registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 as a component of OpenShift API for Data Protection 1.3; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 as a component of OpenShift API for Data Protection 1.3; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x as a component of OpenShift API for Data Protection 1.3; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le as a component of OpenShift API for Data Protection 1.3; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64 as a component of OpenShift API for Data Protection 1.4; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x as a component of OpenShift API for Data Protection 1.4; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64 as a component of OpenShift API for Data Protection 1.4; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le as a component of OpenShift API for Data Protection 1.4; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:15a5dc9571818879988dfdc824ee63fdde8b1e7eb60ea3a6a80e0f8d7e35f07c_arm64 as a component of OpenShift API for Data Protection 1.5; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:99ee1439b65c10715d8c68db82d34c940b35d49333e75206342c4071ac6b7ea9_s390x as a component of OpenShift API for Data Protection 1.5; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:ac6657db103d21fe3087af65ac5db65674808c076108e7e72d44f446a6c06fde_ppc64le as a component of OpenShift API for Data Protection 1.5; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f0eeb401ff9af1cf1a1ec7f675af1b971d333b1b9a060f733583a0505ef755d6_amd64 as a component of OpenShift API for Data Protection 1.5; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3113f8ef93a2abecad7ad6bd44d800c9c2735888b93f7a9b713ee93669fc3802_amd64 as a component of Red Hat OpenShift Service Mesh 3.0; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5f9b2a458158fbf02a611d8d2822c6425d186ce4cd73c091a097a3c0218f18ff_s390x as a component of Red Hat OpenShift Service Mesh 3.0; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2650c47f50206054063e8a62a8073d29a29808b21c2ab3d9964bd70995ff6eb_arm64 as a component of Red Hat OpenShift Service Mesh 3.0; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:e33cee7e3c778713dd44e3109609155061de98b83fbb91a89182179163ec05d4_ppc64le as a component of Red Hat OpenShift Service Mesh 3.0; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x as a component of Red Hat OpenShift Service Mesh 3.1; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64 as a component of Red Hat OpenShift Service Mesh 3.1; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64 as a component of Red Hat OpenShift Service Mesh 3.1; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64 as a component of Red Hat OpenShift Service Mesh 3.2; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x as a component of Red Hat OpenShift Service Mesh 3.2; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64 as a component of Red Hat OpenShift Service Mesh 3.2; registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:022f660bb0be440e9d99abf8815ede618710a390d315ccc79e9812a1c0f9ae02_arm64 as a component of Red Hat Openshift Data Foundation 4.22; registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1e55fe6360f7b5bce7d4ae524235b3ed5c8af0088b90c25c85dc8fe29319e777_ppc64le as a component of Red Hat Openshift Data Foundation 4.22; registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:9e492330bdada69efd431ecc370e3082fdd9366d2e5a00901f1101fb71fbaea5_amd64 as a component of Red Hat Openshift Data Foundation 4.22; registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:bdbd70d08ef6c7266a0a7cf0026192fffdb7c96a9bd13eec21a1046dc60ed54d_s390x as a component of Red Hat Openshift Data Foundation 4.22; registry.redhat.io/odf4/cephcsi-rhel9@sha256:05df2bcbadb214e4873082f282ef013565f04f24dce406d3802288d6ad574741_amd64 as a component of Red Hat Openshift Data Foundation 4.22; registry.redhat.io/odf4/cephcsi-rhel9@sha256:4d2215693809fd61f6d4d81333b41739fd7e34ad87fe79f9176db69c95265acb_s390x as a component of Red Hat Openshift Data Foundation 4.22; and 199 more
    Red Hat Product Security
  2. Affected versionsThe structured affected or fixed version information changed.
    Before
    assisted/agent-preinstall-image-builder-rhel9 as a component of Assisted Installer for Red Hat OpenShift Container Platform 2; openshift-sandboxed-containers/osc-must-gather-rhel9 as a component of Confidential Compute Attestation; rhmtc/openshift-migration-log-reader-rhel8 as a component of Migration Toolkit for Containers; rhmtc/openshift-migration-must-gather-rhel8 as a component of Migration Toolkit for Containers; migration-toolkit-virtualization/mtv-must-gather-rhel8 as a component of Migration Toolkit for Virtualization; mtv-candidate/mtv-must-gather-rhel8 as a component of Migration Toolkit for Virtualization; openshift-serverless-1/kn-client-kn-rhel9 as a component of OpenShift Serverless; openshift-serverless-1/kn-plugin-func-func-util-rhel9 as a component of OpenShift Serverless; openshift-serverless-1/serverless-must-gather-rhel9 as a component of OpenShift Serverless; podman-desktop-macos-1-0 as a component of Red Hat Build of Podman Desktop; podman-desktop-windows-1-0 as a component of Red Hat Build of Podman Desktop; rhdesktop/rh-podman-desktop-ext-bootc-rhel10 as a component of Red Hat Build of Podman Desktop - Tech Preview; rhdesktop/rh-podman-desktop-ext-rhel-rhel10 as a component of Red Hat Build of Podman Desktop - Tech Preview; rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); and 10 more · Fixed: registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 as a component of OpenShift API for Data Protection 1.3; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 as a component of OpenShift API for Data Protection 1.3; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x as a component of OpenShift API for Data Protection 1.3; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le as a component of OpenShift API for Data Protection 1.3; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64 as a component of OpenShift API for Data Protection 1.4; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x as a component of OpenShift API for Data Protection 1.4; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64 as a component of OpenShift API for Data Protection 1.4; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le as a component of OpenShift API for Data Protection 1.4; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:15a5dc9571818879988dfdc824ee63fdde8b1e7eb60ea3a6a80e0f8d7e35f07c_arm64 as a component of OpenShift API for Data Protection 1.5; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:99ee1439b65c10715d8c68db82d34c940b35d49333e75206342c4071ac6b7ea9_s390x as a component of OpenShift API for Data Protection 1.5; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:ac6657db103d21fe3087af65ac5db65674808c076108e7e72d44f446a6c06fde_ppc64le as a component of OpenShift API for Data Protection 1.5; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f0eeb401ff9af1cf1a1ec7f675af1b971d333b1b9a060f733583a0505ef755d6_amd64 as a component of OpenShift API for Data Protection 1.5; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3113f8ef93a2abecad7ad6bd44d800c9c2735888b93f7a9b713ee93669fc3802_amd64 as a component of Red Hat OpenShift Service Mesh 3.0; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5f9b2a458158fbf02a611d8d2822c6425d186ce4cd73c091a097a3c0218f18ff_s390x as a component of Red Hat OpenShift Service Mesh 3.0; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2650c47f50206054063e8a62a8073d29a29808b21c2ab3d9964bd70995ff6eb_arm64 as a component of Red Hat OpenShift Service Mesh 3.0; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:e33cee7e3c778713dd44e3109609155061de98b83fbb91a89182179163ec05d4_ppc64le as a component of Red Hat OpenShift Service Mesh 3.0; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x as a component of Red Hat OpenShift Service Mesh 3.1; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64 as a component of Red Hat OpenShift Service Mesh 3.1; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64 as a component of Red Hat OpenShift Service Mesh 3.1; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64 as a component of Red Hat OpenShift Service Mesh 3.2; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x as a component of Red Hat OpenShift Service Mesh 3.2; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64 as a component of Red Hat OpenShift Service Mesh 3.2; registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:022f660bb0be440e9d99abf8815ede618710a390d315ccc79e9812a1c0f9ae02_arm64 as a component of Red Hat Openshift Data Foundation 4.22; registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1e55fe6360f7b5bce7d4ae524235b3ed5c8af0088b90c25c85dc8fe29319e777_ppc64le as a component of Red Hat Openshift Data Foundation 4.22; registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:9e492330bdada69efd431ecc370e3082fdd9366d2e5a00901f1101fb71fbaea5_amd64 as a component of Red Hat Openshift Data Foundation 4.22; registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:bdbd70d08ef6c7266a0a7cf0026192fffdb7c96a9bd13eec21a1046dc60ed54d_s390x as a component of Red Hat Openshift Data Foundation 4.22; registry.redhat.io/odf4/cephcsi-rhel9@sha256:05df2bcbadb214e4873082f282ef013565f04f24dce406d3802288d6ad574741_amd64 as a component of Red Hat Openshift Data Foundation 4.22; registry.redhat.io/odf4/cephcsi-rhel9@sha256:4d2215693809fd61f6d4d81333b41739fd7e34ad87fe79f9176db69c95265acb_s390x as a component of Red Hat Openshift Data Foundation 4.22; and 111 more
    After
    assisted/agent-preinstall-image-builder-rhel9 as a component of Assisted Installer for Red Hat OpenShift Container Platform 2; openshift-sandboxed-containers/osc-must-gather-rhel9 as a component of Confidential Compute Attestation; rhmtc/openshift-migration-log-reader-rhel8 as a component of Migration Toolkit for Containers; rhmtc/openshift-migration-must-gather-rhel8 as a component of Migration Toolkit for Containers; migration-toolkit-virtualization/mtv-must-gather-rhel8 as a component of Migration Toolkit for Virtualization; mtv-candidate/mtv-must-gather-rhel8 as a component of Migration Toolkit for Virtualization; openshift-serverless-1/kn-client-kn-rhel9 as a component of OpenShift Serverless; openshift-serverless-1/kn-plugin-func-func-util-rhel9 as a component of OpenShift Serverless; openshift-serverless-1/serverless-must-gather-rhel9 as a component of OpenShift Serverless; podman-desktop-macos-1-0 as a component of Red Hat Build of Podman Desktop; podman-desktop-windows-1-0 as a component of Red Hat Build of Podman Desktop; rhdesktop/rh-podman-desktop-ext-bootc-rhel10 as a component of Red Hat Build of Podman Desktop - Tech Preview; rhdesktop/rh-podman-desktop-ext-rhel-rhel10 as a component of Red Hat Build of Podman Desktop - Tech Preview; rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); and 10 more · Fixed: registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 as a component of OpenShift API for Data Protection 1.3; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 as a component of OpenShift API for Data Protection 1.3; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x as a component of OpenShift API for Data Protection 1.3; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le as a component of OpenShift API for Data Protection 1.3; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64 as a component of OpenShift API for Data Protection 1.4; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x as a component of OpenShift API for Data Protection 1.4; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64 as a component of OpenShift API for Data Protection 1.4; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le as a component of OpenShift API for Data Protection 1.4; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:15a5dc9571818879988dfdc824ee63fdde8b1e7eb60ea3a6a80e0f8d7e35f07c_arm64 as a component of OpenShift API for Data Protection 1.5; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:99ee1439b65c10715d8c68db82d34c940b35d49333e75206342c4071ac6b7ea9_s390x as a component of OpenShift API for Data Protection 1.5; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:ac6657db103d21fe3087af65ac5db65674808c076108e7e72d44f446a6c06fde_ppc64le as a component of OpenShift API for Data Protection 1.5; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f0eeb401ff9af1cf1a1ec7f675af1b971d333b1b9a060f733583a0505ef755d6_amd64 as a component of OpenShift API for Data Protection 1.5; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3113f8ef93a2abecad7ad6bd44d800c9c2735888b93f7a9b713ee93669fc3802_amd64 as a component of Red Hat OpenShift Service Mesh 3.0; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5f9b2a458158fbf02a611d8d2822c6425d186ce4cd73c091a097a3c0218f18ff_s390x as a component of Red Hat OpenShift Service Mesh 3.0; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2650c47f50206054063e8a62a8073d29a29808b21c2ab3d9964bd70995ff6eb_arm64 as a component of Red Hat OpenShift Service Mesh 3.0; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:e33cee7e3c778713dd44e3109609155061de98b83fbb91a89182179163ec05d4_ppc64le as a component of Red Hat OpenShift Service Mesh 3.0; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x as a component of Red Hat OpenShift Service Mesh 3.1; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64 as a component of Red Hat OpenShift Service Mesh 3.1; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64 as a component of Red Hat OpenShift Service Mesh 3.1; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64 as a component of Red Hat OpenShift Service Mesh 3.2; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x as a component of Red Hat OpenShift Service Mesh 3.2; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64 as a component of Red Hat OpenShift Service Mesh 3.2; registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:2ddaea535655457fa0c0182edd49001701d57be7208567c25c09e513b105bba1_ppc64le as a component of Red Hat Openshift Data Foundation 4.20; registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:3afe44be9ca582caf9a9a87ee4a4aba0b649df8d7e268110ded40a6e684b7bcf_s390x as a component of Red Hat Openshift Data Foundation 4.20; registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:7757463b71023645bac40673d6684a7dcbc479e11ee19bf33f37daf2b950f98c_arm64 as a component of Red Hat Openshift Data Foundation 4.20; registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:ebc44b5e978f00be3360ae06bc28abff97237c7c0cde315f1d0835295e3c184f_amd64 as a component of Red Hat Openshift Data Foundation 4.20; registry.redhat.io/odf4/cephcsi-rhel9@sha256:729588270355013da1d18c819b5f00816fe9881bf20781e8c2214f1f367f9d2d_ppc64le as a component of Red Hat Openshift Data Foundation 4.20; registry.redhat.io/odf4/cephcsi-rhel9@sha256:80b189979e7cd53dd6ae95756e99eac30d0a9b9a9d252e8b06a8d9b9bfd57ec5_s390x as a component of Red Hat Openshift Data Foundation 4.20; and 199 more
    Red Hat Product Security
  3. Affected versionsThe structured affected or fixed version information changed.
    Before
    assisted/agent-preinstall-image-builder-rhel9 as a component of Assisted Installer for Red Hat OpenShift Container Platform 2; openshift-sandboxed-containers/osc-must-gather-rhel9 as a component of Confidential Compute Attestation; rhmtc/openshift-migration-log-reader-rhel8 as a component of Migration Toolkit for Containers; rhmtc/openshift-migration-must-gather-rhel8 as a component of Migration Toolkit for Containers; migration-toolkit-virtualization/mtv-must-gather-rhel8 as a component of Migration Toolkit for Virtualization; mtv-candidate/mtv-must-gather-rhel8 as a component of Migration Toolkit for Virtualization; openshift-serverless-1/kn-client-kn-rhel9 as a component of OpenShift Serverless; openshift-serverless-1/kn-plugin-func-func-util-rhel9 as a component of OpenShift Serverless; openshift-serverless-1/serverless-must-gather-rhel9 as a component of OpenShift Serverless; podman-desktop-macos-1-0 as a component of Red Hat Build of Podman Desktop; podman-desktop-windows-1-0 as a component of Red Hat Build of Podman Desktop; rhdesktop/rh-podman-desktop-ext-bootc-rhel10 as a component of Red Hat Build of Podman Desktop - Tech Preview; rhdesktop/rh-podman-desktop-ext-rhel-rhel10 as a component of Red Hat Build of Podman Desktop - Tech Preview; rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); and 11 more · Fixed: registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 as a component of OpenShift API for Data Protection 1.3; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 as a component of OpenShift API for Data Protection 1.3; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x as a component of OpenShift API for Data Protection 1.3; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le as a component of OpenShift API for Data Protection 1.3; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64 as a component of OpenShift API for Data Protection 1.4; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x as a component of OpenShift API for Data Protection 1.4; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64 as a component of OpenShift API for Data Protection 1.4; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le as a component of OpenShift API for Data Protection 1.4; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:15a5dc9571818879988dfdc824ee63fdde8b1e7eb60ea3a6a80e0f8d7e35f07c_arm64 as a component of OpenShift API for Data Protection 1.5; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:99ee1439b65c10715d8c68db82d34c940b35d49333e75206342c4071ac6b7ea9_s390x as a component of OpenShift API for Data Protection 1.5; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:ac6657db103d21fe3087af65ac5db65674808c076108e7e72d44f446a6c06fde_ppc64le as a component of OpenShift API for Data Protection 1.5; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f0eeb401ff9af1cf1a1ec7f675af1b971d333b1b9a060f733583a0505ef755d6_amd64 as a component of OpenShift API for Data Protection 1.5; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3113f8ef93a2abecad7ad6bd44d800c9c2735888b93f7a9b713ee93669fc3802_amd64 as a component of Red Hat OpenShift Service Mesh 3.0; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5f9b2a458158fbf02a611d8d2822c6425d186ce4cd73c091a097a3c0218f18ff_s390x as a component of Red Hat OpenShift Service Mesh 3.0; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2650c47f50206054063e8a62a8073d29a29808b21c2ab3d9964bd70995ff6eb_arm64 as a component of Red Hat OpenShift Service Mesh 3.0; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:e33cee7e3c778713dd44e3109609155061de98b83fbb91a89182179163ec05d4_ppc64le as a component of Red Hat OpenShift Service Mesh 3.0; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x as a component of Red Hat OpenShift Service Mesh 3.1; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64 as a component of Red Hat OpenShift Service Mesh 3.1; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64 as a component of Red Hat OpenShift Service Mesh 3.1; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64 as a component of Red Hat OpenShift Service Mesh 3.2; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x as a component of Red Hat OpenShift Service Mesh 3.2; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64 as a component of Red Hat OpenShift Service Mesh 3.2; registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:022f660bb0be440e9d99abf8815ede618710a390d315ccc79e9812a1c0f9ae02_arm64 as a component of Red Hat Openshift Data Foundation 4.22; registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1e55fe6360f7b5bce7d4ae524235b3ed5c8af0088b90c25c85dc8fe29319e777_ppc64le as a component of Red Hat Openshift Data Foundation 4.22; registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:9e492330bdada69efd431ecc370e3082fdd9366d2e5a00901f1101fb71fbaea5_amd64 as a component of Red Hat Openshift Data Foundation 4.22; registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:bdbd70d08ef6c7266a0a7cf0026192fffdb7c96a9bd13eec21a1046dc60ed54d_s390x as a component of Red Hat Openshift Data Foundation 4.22; registry.redhat.io/odf4/cephcsi-rhel9@sha256:05df2bcbadb214e4873082f282ef013565f04f24dce406d3802288d6ad574741_amd64 as a component of Red Hat Openshift Data Foundation 4.22; registry.redhat.io/odf4/cephcsi-rhel9@sha256:4d2215693809fd61f6d4d81333b41739fd7e34ad87fe79f9176db69c95265acb_s390x as a component of Red Hat Openshift Data Foundation 4.22; and 111 more
    After
    assisted/agent-preinstall-image-builder-rhel9 as a component of Assisted Installer for Red Hat OpenShift Container Platform 2; openshift-sandboxed-containers/osc-must-gather-rhel9 as a component of Confidential Compute Attestation; rhmtc/openshift-migration-log-reader-rhel8 as a component of Migration Toolkit for Containers; rhmtc/openshift-migration-must-gather-rhel8 as a component of Migration Toolkit for Containers; migration-toolkit-virtualization/mtv-must-gather-rhel8 as a component of Migration Toolkit for Virtualization; mtv-candidate/mtv-must-gather-rhel8 as a component of Migration Toolkit for Virtualization; openshift-serverless-1/kn-client-kn-rhel9 as a component of OpenShift Serverless; openshift-serverless-1/kn-plugin-func-func-util-rhel9 as a component of OpenShift Serverless; openshift-serverless-1/serverless-must-gather-rhel9 as a component of OpenShift Serverless; podman-desktop-macos-1-0 as a component of Red Hat Build of Podman Desktop; podman-desktop-windows-1-0 as a component of Red Hat Build of Podman Desktop; rhdesktop/rh-podman-desktop-ext-bootc-rhel10 as a component of Red Hat Build of Podman Desktop - Tech Preview; rhdesktop/rh-podman-desktop-ext-rhel-rhel10 as a component of Red Hat Build of Podman Desktop - Tech Preview; rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); and 10 more · Fixed: registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 as a component of OpenShift API for Data Protection 1.3; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 as a component of OpenShift API for Data Protection 1.3; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x as a component of OpenShift API for Data Protection 1.3; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le as a component of OpenShift API for Data Protection 1.3; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64 as a component of OpenShift API for Data Protection 1.4; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x as a component of OpenShift API for Data Protection 1.4; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64 as a component of OpenShift API for Data Protection 1.4; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le as a component of OpenShift API for Data Protection 1.4; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:15a5dc9571818879988dfdc824ee63fdde8b1e7eb60ea3a6a80e0f8d7e35f07c_arm64 as a component of OpenShift API for Data Protection 1.5; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:99ee1439b65c10715d8c68db82d34c940b35d49333e75206342c4071ac6b7ea9_s390x as a component of OpenShift API for Data Protection 1.5; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:ac6657db103d21fe3087af65ac5db65674808c076108e7e72d44f446a6c06fde_ppc64le as a component of OpenShift API for Data Protection 1.5; registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:f0eeb401ff9af1cf1a1ec7f675af1b971d333b1b9a060f733583a0505ef755d6_amd64 as a component of OpenShift API for Data Protection 1.5; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3113f8ef93a2abecad7ad6bd44d800c9c2735888b93f7a9b713ee93669fc3802_amd64 as a component of Red Hat OpenShift Service Mesh 3.0; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5f9b2a458158fbf02a611d8d2822c6425d186ce4cd73c091a097a3c0218f18ff_s390x as a component of Red Hat OpenShift Service Mesh 3.0; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2650c47f50206054063e8a62a8073d29a29808b21c2ab3d9964bd70995ff6eb_arm64 as a component of Red Hat OpenShift Service Mesh 3.0; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:e33cee7e3c778713dd44e3109609155061de98b83fbb91a89182179163ec05d4_ppc64le as a component of Red Hat OpenShift Service Mesh 3.0; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x as a component of Red Hat OpenShift Service Mesh 3.1; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64 as a component of Red Hat OpenShift Service Mesh 3.1; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64 as a component of Red Hat OpenShift Service Mesh 3.1; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64 as a component of Red Hat OpenShift Service Mesh 3.2; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x as a component of Red Hat OpenShift Service Mesh 3.2; registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64 as a component of Red Hat OpenShift Service Mesh 3.2; registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:022f660bb0be440e9d99abf8815ede618710a390d315ccc79e9812a1c0f9ae02_arm64 as a component of Red Hat Openshift Data Foundation 4.22; registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1e55fe6360f7b5bce7d4ae524235b3ed5c8af0088b90c25c85dc8fe29319e777_ppc64le as a component of Red Hat Openshift Data Foundation 4.22; registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:9e492330bdada69efd431ecc370e3082fdd9366d2e5a00901f1101fb71fbaea5_amd64 as a component of Red Hat Openshift Data Foundation 4.22; registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:bdbd70d08ef6c7266a0a7cf0026192fffdb7c96a9bd13eec21a1046dc60ed54d_s390x as a component of Red Hat Openshift Data Foundation 4.22; registry.redhat.io/odf4/cephcsi-rhel9@sha256:05df2bcbadb214e4873082f282ef013565f04f24dce406d3802288d6ad574741_amd64 as a component of Red Hat Openshift Data Foundation 4.22; registry.redhat.io/odf4/cephcsi-rhel9@sha256:4d2215693809fd61f6d4d81333b41739fd7e34ad87fe79f9176db69c95265acb_s390x as a component of Red Hat Openshift Data Foundation 4.22; and 111 more
    Red Hat Product Security
Material fields only · duplicate refreshes suppressed · history retained for the configured operational retention period
Technical terms and abbreviations used in this report
CVE
Common Vulnerabilities and Exposures: the public identifier for one disclosed vulnerability.
CVSS
Common Vulnerability Scoring System: a technical severity framework; it is not patching priority by itself.
EPSS
Exploit Prediction Scoring System: FIRST's estimate of the probability that exploitation activity will be observed in the next 30 days; it is a forecast, not confirmation.
CWE
Common Weakness Enumeration: the standard category describing the underlying software or hardware weakness.
CNA
CVE Numbering Authority: an organisation authorised to assign and publish CVE records.
CISA ADP
Cybersecurity and Infrastructure Security Agency Authorized Data Publisher: structured enrichment added to a CVE record.
NVD
National Vulnerability Database: NIST's enrichment service for CVE records.
CERT / CSIRT
A computer security incident response team that publishes warnings or coordinates incident response.
PoC
Proof of concept: public material that demonstrates or helps reproduce exploitation.
CSAF
Common Security Advisory Framework: a machine-readable format for security advisories.
LoTL
Living off the land: abuse of legitimate tools or system functions during an attack.
Free version - for non-commercial use only.CVE-2026-33748 · cve.blacktree.nl