React Router vulnerable to DoS via unbounded path expansion in __manifest endpoint
remix-run · react-router
Official source article: GitHub GHSA-8X6R-G9MW-2R78 ↗. Check the applicable product and release in the original source.
7.5HighCVSS 3.1
Recommended action
Patch only the product branches with a verified fix
High technical severity; prioritise exposed affected systems while verifying vendor guidance. Verified remediation exists for at least one product or source, but 32 structured product or package states remain unresolved. Apply remediation only to the exact product branch confirmed by its source.
Published severityHigh→Operational priority:High, unchanged from published severity.unchanged
Evidence used
No CISA KEV confirmation is currently recorded.
The selected CVSS metric records a network-reachable, unauthenticated path with no user interaction.
EPSS is 0.46% for the current model date.
Compensating controls
Validate the affected product branch and deploy the verified fixed release.
Restrict the affected network interface to trusted sources where business-safe.
Monitor vendor guidance and exploitation sources for a material change.
Verification
Confirm that the asset runs remix-run react-router and falls inside the recorded affected range.
Verify the installed build against the product-specific fixed version after deployment.
Validate exposure, authentication requirements and compensating controls in the actual environment.
Reopen this reassessment when CVSS, KEV, EPSS, exploit evidence or remediation changes.
Cross-source reconciliation
Remediation availability differs by product scope
Verified remediation exists for at least one product or source, but 32 structured product or package states remain unresolved. Apply remediation only to the exact product branch confirmed by its source.
SUSE Product Security Team: 32 affected or under-investigation product states without a fixed product state in the same current advisory
These OSV and GitHub advisory ranges apply only to the named package and ecosystem. A listed fixed version is not a universal product patch or proof that an update is installed.
Structured product status and remediation from the issuing vendor. Product-state explanations are always visible; large lists can be searched or downloaded.
The vendor explicitly identifies these products as affected by this CVE.
golang-github-prometheus-prometheus as component of SUSE Linux Enterprise Module for Package Hub 15 SP7
trento-web as component of SUSE Linux Enterprise Module for SAP Applications 15 SP4
trento-web as component of SUSE Linux Enterprise Module for SAP Applications 15 SP5
trento-web as component of SUSE Linux Enterprise Module for SAP Applications 15 SP7
golang-github-prometheus-prometheus as component of SUSE Linux Enterprise Server 16.0
trento-web as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4
trento-web as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5
trento-web as component of SUSE Linux Enterprise Server for SAP Applications 15 SP7
golang-github-prometheus-prometheus as component of SUSE Linux Enterprise Server for SAP applications 16.0
trento-web as component of SUSE Linux Enterprise Server for SAP applications 16.0
golang-github-prometheus-prometheus as component of SUSE Manager Client Tools for SLE 15
SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config
Summary
React Router is a router for React. In versions 7.0.0 through 7.14.x of react-router and versions 2.10.0 through 2.17.4 of @remix-run/server-runtime, certain crafted requests can consume disproportionate server resources via unbounded path expansion in the __manifest endpoint, resulting in response time degradation and/or service unavailability for end users. This affects React Router Framework Mode applications as well as Remix applications. This does not impact applications using Declarative Mode (` `) or Data Mode (`createBrowserRouter/ `). This is patched in react-router version 7.15.0 and @remix-run/server-runtime version 2.17.5.
Remediation
No remediation text is recorded.
CVE-2026-42342 · CSAF 2.0 · revision 3 · finalRed Hat Product Securityreact-router: @remix-run/server-runtime: React Router / Remix: Denial of Service via unbounded path expansion in __manifest endpoint
127 known affected
The vendor explicitly identifies these products as affected by this CVE.
exploit-intelligence-tech-preview/agent-client-rhel9 as a component of Exploit Intelligence
gatekeeper/gatekeeper-rhel9 as a component of Gatekeeper 3
rhmtc/openshift-migration-ui-rhel8 as a component of Migration Toolkit for Containers
migration-toolkit-virtualization/mtv-console-plugin-rhel9 as a component of Migration Toolkit for Virtualization
mtv-candidate/mtv-console-plugin-rhel9 as a component of Migration Toolkit for Virtualization
multicluster-engine/console-mce-rhel9 as a component of Multicluster Engine for Kubernetes
workload-availability/node-healthcheck-must-gather-rhel9 as a component of Node HealthCheck Operator
workload-availability/node-healthcheck-operator-bundle as a component of Node HealthCheck Operator
workload-availability/node-healthcheck-rhel9-operator as a component of Node HealthCheck Operator
openshift-pipelines/pipelines-console-plugin-pf5-rhel9 as a component of OpenShift Pipelines
openshift-pipelines/pipelines-console-plugin-rhel8 as a component of OpenShift Pipelines
openshift-pipelines/pipelines-console-plugin-rhel9 as a component of OpenShift Pipelines
Summary
A flaw was found in React Router and @remix-run/server-runtime. A remote attacker can exploit this vulnerability by sending certain crafted requests to the __manifest endpoint. This can lead to unbounded path expansion, consuming disproportionate server resources. The primary consequence is a denial of service (DoS), resulting in response time degradation and service unavailability for end users.
Remediation
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
Optional official sources
National CERT insights ?CERT means Computer Emergency Response Team; CSIRT is the closely related term Computer Security Incident Response Team.
Choose official national sources for this report. Each advisory shows its original language. Your selection is remembered on this device and included in shared links.
Official European source
ENISA European Vulnerability Database
Official EUVD identifiers, advisory evidence and known-exploited context. Missing fields are not treated as evidence of low risk.
1 current
ENISA EUVD identifier
EUVD-2026-34000
No EUVD known-exploited evidence
ENISA has published the identifier mapping but no EUVD description has been stored yet.
EUVD state
Present in the current official mapping
Known exploitation
Not present in the current ENISA EUVD known-exploited dataset. This is not proof of no exploitation.
ENISA score
Not supplied in the stored EUVD record
Advisory evidence
No linked advisory details stored yet
Recommended actionPatch only the product branches with a verified fix
High technical severity; prioritise exposed affected systems while verifying vendor guidance. Verified remediation exists for at least one product or source, but 32 structured product or package states remain unresolved. Apply remediation only to the exact product branch confirmed by its source.
Fix availability varies by product
01
What, why and how
React Router is a router for React. In versions 7.0.0 through 7.14.x of react-router and versions 2.10.0 through 2.17.4 of @remix-run/server-runtime, certain crafted requests can consume disproportionate server resources via unbounded path expansion in the __manifest endpoint, resulting in response time degradation and/or service unavailability for end users. This affects React Router Framework Mode applications as well as Remix applications. This does not impact applications using Declarative Mode (`<BrowserRouter>`) or Data Mode (`createBrowserRouter/<RouterProvider>`). This is patched in react-router version 7.15.0 and @remix-run/server-runtime version 2.17.5.
What
React Router is a router for React. In versions 7.0.0 through 7.14.x of react-router and versions 2.10.0 through 2.17.4 of @remix-run/server-runtime, certain crafted requests can consume disproportionate server resources via unbounded path expansion in the __manifest endpoint, resulting in response time degradation and/or service unavailability for end users. This affects React Router Framework Mode applications as well as Remix applications. This does not impact applications using Declarative Mode (`<BrowserRouter>`) or Data Mode (`createBrowserRouter/<RouterProvider>`). This is patched in react-router version 7.15.0 and @remix-run/server-runtime version 2.17.5.
Why
The product does not properly control the allocation and maintenance of a limited resource.
How
An attacker operating through a network path may attempt exploitation without authentication or user interaction. If successful, the issue may cause the confidentiality, integrity or availability impact described by the vendor.
What
React Router is a router for React. In versions 7.0.0 through 7.14.x of react-router and versions 2.10.0 through 2.17.4 of @remix-run/server-runtime, certain crafted requests can consume disproportionate server resources via unbounded path expansion in the __manifest endpoint, resulting in response time degradation and/or service unavailability for end users. This affects React Router Framework Mode applications as well as Remix applications. This does not impact applications using Declarative Mode (`<BrowserRouter>`) or Data Mode (`createBrowserRouter/<RouterProvider>`). This is patched in react-router version 7.15.0 and @remix-run/server-runtime version 2.17.5.
Why
The product does not properly control the allocation and maintenance of a limited resource.
How
An attacker operating through a network path may attempt exploitation without authentication or user interaction. If successful, the issue may cause the confidentiality, integrity or availability impact described by the vendor.
02
Exploit reality and attack path
CVSS severity, EPSS forecast probability, public exploit material and CISA-confirmed exploitation are separate signals.
Observed exploitation ?Confirmed exploitation and public exploit material are separate signals. Attacks can occur without public proof-of-concept or exploit code.No confirmed evidence
No CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.
Public PoC / exploit material ?Confirmed exploitation and public exploit material are separate signals. Attacks can occur without public proof-of-concept or exploit code.None recorded
No exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.
Likely attack path
a network path → Uncontrolled Resource Consumption → cause the confidentiality, integrity or availability impact described by the vendor
Attack surface
Network
Privileges required
None: unauthenticated exploitation is possible
User interaction
None
Attack complexity
Low: no specialised conditions are recorded
Security boundary
Unchanged: impact remains within the vulnerable component's security authority
Weakness ?CWE means Common Weakness Enumeration: a standard category for the underlying weakness.
CWE-400: Uncontrolled Resource Consumption. The product does not properly control the allocation and maintenance of a limited resource.
CVSS vector ?CVSS means Common Vulnerability Scoring System. The vector records the metric values used to calculate technical severity.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Common Vulnerability Scoring System 3.1: the compact vector below is decoded into plain language.
AVNetworkAttack vector: The vulnerable component can be reached over a network.ACLowAttack complexity: No specialised conditions are required beyond attacker-controlled input.PRNonePrivileges required: The attacker does not need an account or existing privileges.UINoneUser interaction: No action by another user is required.SUnchangedScope: The security impact remains within the vulnerable component's authority.CNoneConfidentiality impact: No direct loss is represented by this metric.INoneIntegrity impact: No direct loss is represented by this metric.AHighAvailability impact: A successful attack can cause a major loss.
Post-exploitation / living off the land
No specific living-off-the-land technique is confirmed in the structured sources. Monitor normal administration tools for activity inconsistent with the affected service's baseline.
NetworkUnauthenticatedCWE-400
A
Official authority intelligence
Only matched European and national findings are included. Language selectors and unavailable sources are omitted.
ENISA EUVD · EUVD-2026-34000Official EUVD mapping
0 linked advisory records.
Official EUVD record ↗BSI · German · WID-SEC-2026-3046IBM Concert: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in IBM Concert ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, um einen SQL-Injection Angriff durchzuführen und um Sicherheitsvorkehrungen zu umgehen.
Official advisory ↗BSI · German · WID-SEC-2026-1955Atlassian Bamboo, Bitbucket, Confluence, Fisheye, Crucible, Jira und Jira Service Management: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in Atlassian Bamboo, Bitbucket, Confluence, Fisheye, Crucible, Jira und Jira Service Management ausnutzen, um beliebigen Code auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.
Official advisory ↗CERT-FR · French · CERTFR-2026-AVI-0933Multiples vulnérabilités dans les produits IBM
Operational remediation based on structured source evidence.
Status ?Patch availability is based on structured fixed-version fields and authoritative update references. If no fix is verified, check the vendor advisory before making a change.
Use the product-specific evidence above. Patch only products with a verified fixed release, and keep every affected or under-investigation state without a matching fix in the remediation queue.
Workaround
No verified workaround is recorded. If business-safe, reduce exposure to the affected interface and allow only trusted sources until authoritative guidance is available.
Official vendor articles1 stored document
Linked articles are downloaded and versioned as source evidence. A CVE mention or approved update relationship does not, by itself, verify a fix for every product branch.
Security Bulletin - June 16 2026 | Atlassian Support | Atlassian Documentation →Original publisher ↗Searchable text snapshot · Captured 27 Sep 2026Unable to load
Security Bulletin - June 16 2026
Security Advisories & Bulletins
November 2022: Atlassian Security Advisories Overview
Archived Security Advisories
Security Advisories for Apps
July 2022: Atlassian Security Advisories Overview
August 2022: Atlassian Security Advisories Overview
January 2023: Securit
04
Evidence and provenance
Published 2 Jun 2026 · Last source change 3 Jun 2026, 13:52 UTC · CWE-400 · Uncontrolled Resource Consumption
CVE recordCVE.org · 5.2
CVSS sourceCNA
EPSS source ?The date BlackTree first stored a score for this CVE from the daily FIRST EPSS feed.FIRST · tracked since 2026-08-14
European sourceENISA EUVD · EUVD-2026-34000
Product sourceVendor CSAF · SUSE Product Security Team
Remediation sourceVendor CSAF · Red Hat Product Security
CWE sourceCNA
NVD statusNVD enriched
Core structured fields are present and their contributing authorities are shown above.
Affected versionsThe structured affected or fixed version information changed.
Before
exploit-intelligence-tech-preview/agent-client-rhel9 as a component of Exploit Intelligence; gatekeeper/gatekeeper-rhel9 as a component of Gatekeeper 3; rhmtc/openshift-migration-ui-rhel8 as a component of Migration Toolkit for Containers; migration-toolkit-virtualization/mtv-console-plugin-rhel9 as a component of Migration Toolkit for Virtualization; mtv-candidate/mtv-console-plugin-rhel9 as a component of Migration Toolkit for Virtualization; multicluster-engine/console-mce-rhel9 as a component of Multicluster Engine for Kubernetes; workload-availability/node-healthcheck-must-gather-rhel9 as a component of Node HealthCheck Operator; workload-availability/node-healthcheck-operator-bundle as a component of Node HealthCheck Operator; workload-availability/node-healthcheck-rhel9-operator as a component of Node HealthCheck Operator; openshift-pipelines/pipelines-console-plugin-pf5-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-console-plugin-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-console-plugin-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-hub-ui-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-hub-ui-rhel9 as a component of OpenShift Pipelines; openshift-service-mesh/kiali-rhel8 as a component of OpenShift Service Mesh 2; redhat-user-workloads/console-acm-211 as a component of Red Hat Advanced Cluster Management for Kubernetes 2; redhat-user-workloads/console-acm-212 as a component of Red Hat Advanced Cluster Management for Kubernetes 2; redhat-user-workloads/console-acm-213 as a component of Red Hat Advanced Cluster Management for Kubernetes 2; rhacm2/console-rhel9 as a component of Red Hat Advanced Cluster Management for Kubernetes 2; advanced-cluster-security/rhacs-main-rhel8 as a component of Red Hat Advanced Cluster Security 4; ansible-automation-platform-26/gateway-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-27/gateway-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-on-clouds/aoc-azure-aap-installer-rhel9 as a component of Red Hat Ansible Automation Platform 2; automation-controller.src as a component of Red Hat Ansible Automation Platform 2; automation-eda-controller.src as a component of Red Hat Ansible Automation Platform 2; automation-gateway.src as a component of Red Hat Ansible Automation Platform 2; automation-hub.src as a component of Red Hat Ansible Automation Platform 2; automation-platform-ui.src as a component of Red Hat Ansible Automation Platform 2; python-galaxy-ng.src as a component of Red Hat Ansible Automation Platform 2; python3.11-galaxy-ng.src as a component of Red Hat Ansible Automation Platform 2; and 98 more · Fixed: Red Hat Data Grid 8.6.2; registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64 as a component of Red Hat Migration Toolkit for Applications 8.1; registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64 as a component of Red Hat Migration Toolkit for Applications 8.1; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4a475dd6221080671c742651eede4964956caf997fa84f10c1c889b4bb2eb935_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:c7daef8e89de0e096983b72e81eeae966cea075874f1ddc498e0f92b9d5a278d_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:dbaf78b7927d84af5cb0839937541970959ad7c22238e0ba1128eaf7605968b2_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:f3ee104a6bda47b1fd75494d5cde518327d39a5b1e3db2353e3103a77d75baf0_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-gen-ai-rhel9@sha256:9915f3fc3c46d344a564fdacdd664693bf50959529b7caa764b55af87f2d0be1_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-gen-ai-rhel9@sha256:998798f4223dd67b817ddf50b678cdeced3ed2cf187151a9168bf654e50fddf3_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-gen-ai-rhel9@sha256:b540bd6da922dadab8137f80eb64469d0ff4c3bc5db3a6be376a1165a5b03ad6_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-gen-ai-rhel9@sha256:c2f6c90207a43ca340bbec37b7d7924bf4bce20017f3dd4ec796d83d3ba4ef14_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9@sha256:33ca5bc60d35bef45d2c5431455a2343c33ff4f68206a204fa5dcbbef1c8fd61_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9@sha256:4453996c789675875e7081eed144105605de179bde845700bf1fc1673cfaa081_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9@sha256:69ed79480a404bbc4914048bc39cb57b4face422c84211fb946acbe14c36ae7c_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9@sha256:e24d5ac46b063c86c829a7fc2699659324e6d403ede258e7bb20b8262a0e08a7_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-mlflow-rhel9@sha256:3aa0c135e75b993c2c186f0c5c5a4c9ac6159e68381a43ca0a22c8519325d956_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-mlflow-rhel9@sha256:5ffaed7dea59ce416c98d3e4d902c129f8fa96c05905796175516c97bc04a2ac_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-mlflow-rhel9@sha256:70b95eb59e00d862238b91e414d4dad03192a9d2305d1cca75a12f1fc287e25e_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-mlflow-rhel9@sha256:cf14313872b203fed61a3d42252e1b315a7a6196fa4d442d50008609b7abaf0d_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:202f8404abdd76d8c4b8135ec8eeb7386739c32144f6f778bdcbdfcf53c8509c_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:a17863e91facfeb761fd6e5416b284c00479c3687dab2c7e9672ebeaa2256fe0_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:e7aa026fc1676f479adc449a9d3d2289d0cf6e746c73ba435f902ceef41c0219_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f2fdc213486ce88a40ec2e6484567d26e58dee9024e386b16c4445ee688e44f8_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/devspaces/dashboard-rhel9@sha256:35e473eed97efe209e4b0f064e9b4d7441b0391f3d66634b1267d1f942a53bae_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/dashboard-rhel9@sha256:4da408d8b9dd1368285e5f289dd89ab2f86f069e50d88b1241e997b88edbf7ed_amd64 as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/dashboard-rhel9@sha256:6af7182edffac5d714a9943782e319ab0cc303799df7aaf1593f5eefed9fe3b9_arm64 as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/dashboard-rhel9@sha256:aa822e3f4d4456b6b32607b38f2c121188cd6f3d63b13d876f5b0c206eb2478b_s390x as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/openvsx-rhel9@sha256:0387c27ab77bb1900d35259943a6ead5be0402ceb7cc5824eed2f47bfd1f2ef4_arm64 as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/openvsx-rhel9@sha256:26167c95c1f10106c23f1e93da0f57b4f5f59145927f4141f45b75d3b420d216_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/openvsx-rhel9@sha256:550a66cf7c4375aa2bbce551c2c53ca1bfaf98928e5263a73ca63e6f0862e936_amd64 as a component of Red Hat OpenShift Dev Spaces 3.29; and 148 more
After
exploit-intelligence-tech-preview/agent-client-rhel9 as a component of Exploit Intelligence; gatekeeper/gatekeeper-rhel9 as a component of Gatekeeper 3; rhmtc/openshift-migration-ui-rhel8 as a component of Migration Toolkit for Containers; migration-toolkit-virtualization/mtv-console-plugin-rhel9 as a component of Migration Toolkit for Virtualization; mtv-candidate/mtv-console-plugin-rhel9 as a component of Migration Toolkit for Virtualization; multicluster-engine/console-mce-rhel9 as a component of Multicluster Engine for Kubernetes; workload-availability/node-healthcheck-must-gather-rhel9 as a component of Node HealthCheck Operator; workload-availability/node-healthcheck-operator-bundle as a component of Node HealthCheck Operator; workload-availability/node-healthcheck-rhel9-operator as a component of Node HealthCheck Operator; openshift-pipelines/pipelines-console-plugin-pf5-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-console-plugin-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-console-plugin-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-hub-ui-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-hub-ui-rhel9 as a component of OpenShift Pipelines; openshift-service-mesh/kiali-rhel8 as a component of OpenShift Service Mesh 2; redhat-user-workloads/console-acm-211 as a component of Red Hat Advanced Cluster Management for Kubernetes 2; redhat-user-workloads/console-acm-212 as a component of Red Hat Advanced Cluster Management for Kubernetes 2; redhat-user-workloads/console-acm-213 as a component of Red Hat Advanced Cluster Management for Kubernetes 2; rhacm2/console-rhel9 as a component of Red Hat Advanced Cluster Management for Kubernetes 2; advanced-cluster-security/rhacs-main-rhel8 as a component of Red Hat Advanced Cluster Security 4; ansible-automation-platform-26/gateway-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-27/gateway-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-on-clouds/aoc-azure-aap-installer-rhel9 as a component of Red Hat Ansible Automation Platform 2; automation-controller.src as a component of Red Hat Ansible Automation Platform 2; automation-eda-controller.src as a component of Red Hat Ansible Automation Platform 2; automation-gateway.src as a component of Red Hat Ansible Automation Platform 2; automation-hub.src as a component of Red Hat Ansible Automation Platform 2; automation-platform-ui.src as a component of Red Hat Ansible Automation Platform 2; python-galaxy-ng.src as a component of Red Hat Ansible Automation Platform 2; python3.11-galaxy-ng.src as a component of Red Hat Ansible Automation Platform 2; and 97 more · Fixed: Red Hat Data Grid 8.6.2; registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64 as a component of Red Hat Migration Toolkit for Applications 8.1; registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64 as a component of Red Hat Migration Toolkit for Applications 8.1; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4a475dd6221080671c742651eede4964956caf997fa84f10c1c889b4bb2eb935_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:c7daef8e89de0e096983b72e81eeae966cea075874f1ddc498e0f92b9d5a278d_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:dbaf78b7927d84af5cb0839937541970959ad7c22238e0ba1128eaf7605968b2_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:f3ee104a6bda47b1fd75494d5cde518327d39a5b1e3db2353e3103a77d75baf0_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-gen-ai-rhel9@sha256:9915f3fc3c46d344a564fdacdd664693bf50959529b7caa764b55af87f2d0be1_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-gen-ai-rhel9@sha256:998798f4223dd67b817ddf50b678cdeced3ed2cf187151a9168bf654e50fddf3_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-gen-ai-rhel9@sha256:b540bd6da922dadab8137f80eb64469d0ff4c3bc5db3a6be376a1165a5b03ad6_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-gen-ai-rhel9@sha256:c2f6c90207a43ca340bbec37b7d7924bf4bce20017f3dd4ec796d83d3ba4ef14_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9@sha256:33ca5bc60d35bef45d2c5431455a2343c33ff4f68206a204fa5dcbbef1c8fd61_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9@sha256:4453996c789675875e7081eed144105605de179bde845700bf1fc1673cfaa081_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9@sha256:69ed79480a404bbc4914048bc39cb57b4face422c84211fb946acbe14c36ae7c_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9@sha256:e24d5ac46b063c86c829a7fc2699659324e6d403ede258e7bb20b8262a0e08a7_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-mlflow-rhel9@sha256:3aa0c135e75b993c2c186f0c5c5a4c9ac6159e68381a43ca0a22c8519325d956_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-mlflow-rhel9@sha256:5ffaed7dea59ce416c98d3e4d902c129f8fa96c05905796175516c97bc04a2ac_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-mlflow-rhel9@sha256:70b95eb59e00d862238b91e414d4dad03192a9d2305d1cca75a12f1fc287e25e_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-mlflow-rhel9@sha256:cf14313872b203fed61a3d42252e1b315a7a6196fa4d442d50008609b7abaf0d_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:202f8404abdd76d8c4b8135ec8eeb7386739c32144f6f778bdcbdfcf53c8509c_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:a17863e91facfeb761fd6e5416b284c00479c3687dab2c7e9672ebeaa2256fe0_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:e7aa026fc1676f479adc449a9d3d2289d0cf6e746c73ba435f902ceef41c0219_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f2fdc213486ce88a40ec2e6484567d26e58dee9024e386b16c4445ee688e44f8_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/devspaces/dashboard-rhel9@sha256:35e473eed97efe209e4b0f064e9b4d7441b0391f3d66634b1267d1f942a53bae_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/dashboard-rhel9@sha256:4da408d8b9dd1368285e5f289dd89ab2f86f069e50d88b1241e997b88edbf7ed_amd64 as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/dashboard-rhel9@sha256:6af7182edffac5d714a9943782e319ab0cc303799df7aaf1593f5eefed9fe3b9_arm64 as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/dashboard-rhel9@sha256:aa822e3f4d4456b6b32607b38f2c121188cd6f3d63b13d876f5b0c206eb2478b_s390x as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/openvsx-rhel9@sha256:0387c27ab77bb1900d35259943a6ead5be0402ceb7cc5824eed2f47bfd1f2ef4_arm64 as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/openvsx-rhel9@sha256:26167c95c1f10106c23f1e93da0f57b4f5f59145927f4141f45b75d3b420d216_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/openvsx-rhel9@sha256:550a66cf7c4375aa2bbce551c2c53ca1bfaf98928e5263a73ca63e6f0862e936_amd64 as a component of Red Hat OpenShift Dev Spaces 3.29; and 148 more
Affected versionsThe structured affected or fixed version information changed.
Before
>= 7.0.0, < 7.15.0; >= 2.10.0, < 2.17.5 · Fixed: No fixed version is explicitly recorded in the structured CVE data.
After
>= 7.0.0, < 7.15.0; >= 2.10.0, < 2.17.5 · Fixed: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
Affected versionsThe structured affected or fixed version information changed.
Before
exploit-intelligence-tech-preview/agent-client-rhel9 as a component of Exploit Intelligence; gatekeeper/gatekeeper-rhel9 as a component of Gatekeeper 3; rhmtc/openshift-migration-ui-rhel8 as a component of Migration Toolkit for Containers; migration-toolkit-virtualization/mtv-console-plugin-rhel9 as a component of Migration Toolkit for Virtualization; mtv-candidate/mtv-console-plugin-rhel9 as a component of Migration Toolkit for Virtualization; multicluster-engine/console-mce-rhel9 as a component of Multicluster Engine for Kubernetes; workload-availability/node-healthcheck-must-gather-rhel9 as a component of Node HealthCheck Operator; workload-availability/node-healthcheck-operator-bundle as a component of Node HealthCheck Operator; workload-availability/node-healthcheck-rhel9-operator as a component of Node HealthCheck Operator; openshift-pipelines/pipelines-console-plugin-pf5-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-console-plugin-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-console-plugin-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-hub-ui-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-hub-ui-rhel9 as a component of OpenShift Pipelines; openshift-service-mesh/kiali-rhel8 as a component of OpenShift Service Mesh 2; redhat-user-workloads/console-acm-211 as a component of Red Hat Advanced Cluster Management for Kubernetes 2; redhat-user-workloads/console-acm-212 as a component of Red Hat Advanced Cluster Management for Kubernetes 2; redhat-user-workloads/console-acm-213 as a component of Red Hat Advanced Cluster Management for Kubernetes 2; rhacm2/console-rhel9 as a component of Red Hat Advanced Cluster Management for Kubernetes 2; advanced-cluster-security/rhacs-main-rhel8 as a component of Red Hat Advanced Cluster Security 4; ansible-automation-platform-26/gateway-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-27/gateway-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-on-clouds/aoc-azure-aap-installer-rhel9 as a component of Red Hat Ansible Automation Platform 2; automation-controller.src as a component of Red Hat Ansible Automation Platform 2; automation-eda-controller.src as a component of Red Hat Ansible Automation Platform 2; automation-gateway.src as a component of Red Hat Ansible Automation Platform 2; automation-hub.src as a component of Red Hat Ansible Automation Platform 2; automation-platform-ui.src as a component of Red Hat Ansible Automation Platform 2; python-galaxy-ng.src as a component of Red Hat Ansible Automation Platform 2; python3.11-galaxy-ng.src as a component of Red Hat Ansible Automation Platform 2; and 99 more · Fixed: Red Hat Data Grid 8.6.2; registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64 as a component of Red Hat Migration Toolkit for Applications 8.1; registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64 as a component of Red Hat Migration Toolkit for Applications 8.1; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4a475dd6221080671c742651eede4964956caf997fa84f10c1c889b4bb2eb935_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:c7daef8e89de0e096983b72e81eeae966cea075874f1ddc498e0f92b9d5a278d_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:dbaf78b7927d84af5cb0839937541970959ad7c22238e0ba1128eaf7605968b2_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:f3ee104a6bda47b1fd75494d5cde518327d39a5b1e3db2353e3103a77d75baf0_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-gen-ai-rhel9@sha256:9915f3fc3c46d344a564fdacdd664693bf50959529b7caa764b55af87f2d0be1_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-gen-ai-rhel9@sha256:998798f4223dd67b817ddf50b678cdeced3ed2cf187151a9168bf654e50fddf3_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-gen-ai-rhel9@sha256:b540bd6da922dadab8137f80eb64469d0ff4c3bc5db3a6be376a1165a5b03ad6_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-gen-ai-rhel9@sha256:c2f6c90207a43ca340bbec37b7d7924bf4bce20017f3dd4ec796d83d3ba4ef14_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9@sha256:33ca5bc60d35bef45d2c5431455a2343c33ff4f68206a204fa5dcbbef1c8fd61_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9@sha256:4453996c789675875e7081eed144105605de179bde845700bf1fc1673cfaa081_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9@sha256:69ed79480a404bbc4914048bc39cb57b4face422c84211fb946acbe14c36ae7c_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9@sha256:e24d5ac46b063c86c829a7fc2699659324e6d403ede258e7bb20b8262a0e08a7_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-mlflow-rhel9@sha256:3aa0c135e75b993c2c186f0c5c5a4c9ac6159e68381a43ca0a22c8519325d956_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-mlflow-rhel9@sha256:5ffaed7dea59ce416c98d3e4d902c129f8fa96c05905796175516c97bc04a2ac_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-mlflow-rhel9@sha256:70b95eb59e00d862238b91e414d4dad03192a9d2305d1cca75a12f1fc287e25e_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-mlflow-rhel9@sha256:cf14313872b203fed61a3d42252e1b315a7a6196fa4d442d50008609b7abaf0d_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:202f8404abdd76d8c4b8135ec8eeb7386739c32144f6f778bdcbdfcf53c8509c_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:a17863e91facfeb761fd6e5416b284c00479c3687dab2c7e9672ebeaa2256fe0_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:e7aa026fc1676f479adc449a9d3d2289d0cf6e746c73ba435f902ceef41c0219_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f2fdc213486ce88a40ec2e6484567d26e58dee9024e386b16c4445ee688e44f8_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/devspaces/dashboard-rhel9@sha256:35e473eed97efe209e4b0f064e9b4d7441b0391f3d66634b1267d1f942a53bae_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/dashboard-rhel9@sha256:4da408d8b9dd1368285e5f289dd89ab2f86f069e50d88b1241e997b88edbf7ed_amd64 as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/dashboard-rhel9@sha256:6af7182edffac5d714a9943782e319ab0cc303799df7aaf1593f5eefed9fe3b9_arm64 as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/dashboard-rhel9@sha256:aa822e3f4d4456b6b32607b38f2c121188cd6f3d63b13d876f5b0c206eb2478b_s390x as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/openvsx-rhel9@sha256:0387c27ab77bb1900d35259943a6ead5be0402ceb7cc5824eed2f47bfd1f2ef4_arm64 as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/openvsx-rhel9@sha256:26167c95c1f10106c23f1e93da0f57b4f5f59145927f4141f45b75d3b420d216_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/openvsx-rhel9@sha256:550a66cf7c4375aa2bbce551c2c53ca1bfaf98928e5263a73ca63e6f0862e936_amd64 as a component of Red Hat OpenShift Dev Spaces 3.29; and 148 more
After
exploit-intelligence-tech-preview/agent-client-rhel9 as a component of Exploit Intelligence; gatekeeper/gatekeeper-rhel9 as a component of Gatekeeper 3; rhmtc/openshift-migration-ui-rhel8 as a component of Migration Toolkit for Containers; migration-toolkit-virtualization/mtv-console-plugin-rhel9 as a component of Migration Toolkit for Virtualization; mtv-candidate/mtv-console-plugin-rhel9 as a component of Migration Toolkit for Virtualization; multicluster-engine/console-mce-rhel9 as a component of Multicluster Engine for Kubernetes; workload-availability/node-healthcheck-must-gather-rhel9 as a component of Node HealthCheck Operator; workload-availability/node-healthcheck-operator-bundle as a component of Node HealthCheck Operator; workload-availability/node-healthcheck-rhel9-operator as a component of Node HealthCheck Operator; openshift-pipelines/pipelines-console-plugin-pf5-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-console-plugin-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-console-plugin-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-hub-ui-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-hub-ui-rhel9 as a component of OpenShift Pipelines; openshift-service-mesh/kiali-rhel8 as a component of OpenShift Service Mesh 2; redhat-user-workloads/console-acm-211 as a component of Red Hat Advanced Cluster Management for Kubernetes 2; redhat-user-workloads/console-acm-212 as a component of Red Hat Advanced Cluster Management for Kubernetes 2; redhat-user-workloads/console-acm-213 as a component of Red Hat Advanced Cluster Management for Kubernetes 2; rhacm2/console-rhel9 as a component of Red Hat Advanced Cluster Management for Kubernetes 2; advanced-cluster-security/rhacs-main-rhel8 as a component of Red Hat Advanced Cluster Security 4; ansible-automation-platform-26/gateway-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-27/gateway-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-on-clouds/aoc-azure-aap-installer-rhel9 as a component of Red Hat Ansible Automation Platform 2; automation-controller.src as a component of Red Hat Ansible Automation Platform 2; automation-eda-controller.src as a component of Red Hat Ansible Automation Platform 2; automation-gateway.src as a component of Red Hat Ansible Automation Platform 2; automation-hub.src as a component of Red Hat Ansible Automation Platform 2; automation-platform-ui.src as a component of Red Hat Ansible Automation Platform 2; python-galaxy-ng.src as a component of Red Hat Ansible Automation Platform 2; python3.11-galaxy-ng.src as a component of Red Hat Ansible Automation Platform 2; and 98 more · Fixed: Red Hat Data Grid 8.6.2; registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64 as a component of Red Hat Migration Toolkit for Applications 8.1; registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64 as a component of Red Hat Migration Toolkit for Applications 8.1; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4a475dd6221080671c742651eede4964956caf997fa84f10c1c889b4bb2eb935_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:c7daef8e89de0e096983b72e81eeae966cea075874f1ddc498e0f92b9d5a278d_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:dbaf78b7927d84af5cb0839937541970959ad7c22238e0ba1128eaf7605968b2_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:f3ee104a6bda47b1fd75494d5cde518327d39a5b1e3db2353e3103a77d75baf0_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-gen-ai-rhel9@sha256:9915f3fc3c46d344a564fdacdd664693bf50959529b7caa764b55af87f2d0be1_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-gen-ai-rhel9@sha256:998798f4223dd67b817ddf50b678cdeced3ed2cf187151a9168bf654e50fddf3_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-gen-ai-rhel9@sha256:b540bd6da922dadab8137f80eb64469d0ff4c3bc5db3a6be376a1165a5b03ad6_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-gen-ai-rhel9@sha256:c2f6c90207a43ca340bbec37b7d7924bf4bce20017f3dd4ec796d83d3ba4ef14_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9@sha256:33ca5bc60d35bef45d2c5431455a2343c33ff4f68206a204fa5dcbbef1c8fd61_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9@sha256:4453996c789675875e7081eed144105605de179bde845700bf1fc1673cfaa081_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9@sha256:69ed79480a404bbc4914048bc39cb57b4face422c84211fb946acbe14c36ae7c_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9@sha256:e24d5ac46b063c86c829a7fc2699659324e6d403ede258e7bb20b8262a0e08a7_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-mlflow-rhel9@sha256:3aa0c135e75b993c2c186f0c5c5a4c9ac6159e68381a43ca0a22c8519325d956_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-mlflow-rhel9@sha256:5ffaed7dea59ce416c98d3e4d902c129f8fa96c05905796175516c97bc04a2ac_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-mlflow-rhel9@sha256:70b95eb59e00d862238b91e414d4dad03192a9d2305d1cca75a12f1fc287e25e_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-mlflow-rhel9@sha256:cf14313872b203fed61a3d42252e1b315a7a6196fa4d442d50008609b7abaf0d_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:202f8404abdd76d8c4b8135ec8eeb7386739c32144f6f778bdcbdfcf53c8509c_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:a17863e91facfeb761fd6e5416b284c00479c3687dab2c7e9672ebeaa2256fe0_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:e7aa026fc1676f479adc449a9d3d2289d0cf6e746c73ba435f902ceef41c0219_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f2fdc213486ce88a40ec2e6484567d26e58dee9024e386b16c4445ee688e44f8_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/devspaces/dashboard-rhel9@sha256:35e473eed97efe209e4b0f064e9b4d7441b0391f3d66634b1267d1f942a53bae_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/dashboard-rhel9@sha256:4da408d8b9dd1368285e5f289dd89ab2f86f069e50d88b1241e997b88edbf7ed_amd64 as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/dashboard-rhel9@sha256:6af7182edffac5d714a9943782e319ab0cc303799df7aaf1593f5eefed9fe3b9_arm64 as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/dashboard-rhel9@sha256:aa822e3f4d4456b6b32607b38f2c121188cd6f3d63b13d876f5b0c206eb2478b_s390x as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/openvsx-rhel9@sha256:0387c27ab77bb1900d35259943a6ead5be0402ceb7cc5824eed2f47bfd1f2ef4_arm64 as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/openvsx-rhel9@sha256:26167c95c1f10106c23f1e93da0f57b4f5f59145927f4141f45b75d3b420d216_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/openvsx-rhel9@sha256:550a66cf7c4375aa2bbce551c2c53ca1bfaf98928e5263a73ca63e6f0862e936_amd64 as a component of Red Hat OpenShift Dev Spaces 3.29; and 148 more
Affected versionsThe structured affected or fixed version information changed.
Before
exploit-intelligence-tech-preview/agent-client-rhel9 as a component of Exploit Intelligence; gatekeeper/gatekeeper-rhel9 as a component of Gatekeeper 3; rhmtc/openshift-migration-ui-rhel8 as a component of Migration Toolkit for Containers; migration-toolkit-virtualization/mtv-console-plugin-rhel9 as a component of Migration Toolkit for Virtualization; mtv-candidate/mtv-console-plugin-rhel9 as a component of Migration Toolkit for Virtualization; multicluster-engine/console-mce-rhel9 as a component of Multicluster Engine for Kubernetes; workload-availability/node-healthcheck-must-gather-rhel9 as a component of Node HealthCheck Operator; workload-availability/node-healthcheck-operator-bundle as a component of Node HealthCheck Operator; workload-availability/node-healthcheck-rhel9-operator as a component of Node HealthCheck Operator; openshift-pipelines/pipelines-console-plugin-pf5-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-console-plugin-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-console-plugin-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-hub-ui-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-hub-ui-rhel9 as a component of OpenShift Pipelines; openshift-service-mesh/kiali-rhel8 as a component of OpenShift Service Mesh 2; redhat-user-workloads/console-acm-211 as a component of Red Hat Advanced Cluster Management for Kubernetes 2; redhat-user-workloads/console-acm-212 as a component of Red Hat Advanced Cluster Management for Kubernetes 2; redhat-user-workloads/console-acm-213 as a component of Red Hat Advanced Cluster Management for Kubernetes 2; rhacm2/console-rhel9 as a component of Red Hat Advanced Cluster Management for Kubernetes 2; advanced-cluster-security/rhacs-main-rhel8 as a component of Red Hat Advanced Cluster Security 4; ansible-automation-platform-26/gateway-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-27/gateway-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-on-clouds/aoc-azure-aap-installer-rhel9 as a component of Red Hat Ansible Automation Platform 2; automation-controller.src as a component of Red Hat Ansible Automation Platform 2; automation-eda-controller.src as a component of Red Hat Ansible Automation Platform 2; automation-gateway.src as a component of Red Hat Ansible Automation Platform 2; automation-hub.src as a component of Red Hat Ansible Automation Platform 2; automation-platform-ui.src as a component of Red Hat Ansible Automation Platform 2; python-galaxy-ng.src as a component of Red Hat Ansible Automation Platform 2; python3.11-galaxy-ng.src as a component of Red Hat Ansible Automation Platform 2; and 104 more · Fixed: Red Hat Data Grid 8.6.2; registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64 as a component of Red Hat Migration Toolkit for Applications 8.1; registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64 as a component of Red Hat Migration Toolkit for Applications 8.1; registry.redhat.io/devspaces/dashboard-rhel9@sha256:35e473eed97efe209e4b0f064e9b4d7441b0391f3d66634b1267d1f942a53bae_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/dashboard-rhel9@sha256:4da408d8b9dd1368285e5f289dd89ab2f86f069e50d88b1241e997b88edbf7ed_amd64 as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/dashboard-rhel9@sha256:6af7182edffac5d714a9943782e319ab0cc303799df7aaf1593f5eefed9fe3b9_arm64 as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/dashboard-rhel9@sha256:aa822e3f4d4456b6b32607b38f2c121188cd6f3d63b13d876f5b0c206eb2478b_s390x as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/openvsx-rhel9@sha256:0387c27ab77bb1900d35259943a6ead5be0402ceb7cc5824eed2f47bfd1f2ef4_arm64 as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/openvsx-rhel9@sha256:26167c95c1f10106c23f1e93da0f57b4f5f59145927f4141f45b75d3b420d216_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/openvsx-rhel9@sha256:550a66cf7c4375aa2bbce551c2c53ca1bfaf98928e5263a73ca63e6f0862e936_amd64 as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/openvsx-rhel9@sha256:d9694d9deba2a2ce2458a54d1cb15462374778d072a5974628e027add1ad7704_s390x as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:21b851833c425cd0638fa0d97672b30481fe6196a38817955500f10f3516acaa_arm64 as a component of Red Hat Openshift Data Foundation 4.18; registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:4e29a09b15c2149d96e02b302dfa5c89d88e647467427f251d7dcc949710a153_s390x as a component of Red Hat Openshift Data Foundation 4.18; registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:7bbc972cffbd7c92a685e1cfb73365b261908046ccd7b712659b9b47737dfafa_ppc64le as a component of Red Hat Openshift Data Foundation 4.18; registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:dd66f2aabe08104f33b6ed32786947f9b91c37404d06b46838397c8c791dad0a_amd64 as a component of Red Hat Openshift Data Foundation 4.18; registry.redhat.io/odf4/cephcsi-rhel9@sha256:5e63bdd0b4345a25ed76efcc62a068f88b0c688328713e1711ca4cac73f96d76_s390x as a component of Red Hat Openshift Data Foundation 4.18; registry.redhat.io/odf4/cephcsi-rhel9@sha256:5eeddca3c800ec55d4d7dd479cfcd1751394b40e481b86433cd3838d2170952c_ppc64le as a component of Red Hat Openshift Data Foundation 4.18; registry.redhat.io/odf4/cephcsi-rhel9@sha256:fd06b75eb32cf69d0ab0c18eb922d540f0362d12aec3a9029fa77e13f307cb3f_amd64 as a component of Red Hat Openshift Data Foundation 4.18; registry.redhat.io/odf4/mcg-core-rhel9@sha256:2156c85468c3bd37a4a9cec2538aaf529fc4317b1cd56705c4f39247dbc1d1ff_ppc64le as a component of Red Hat Openshift Data Foundation 4.18; registry.redhat.io/odf4/mcg-core-rhel9@sha256:3701ca9bcf39e032702226a25a2d1a1ceedb2c9dc9e5bcfedc0104ad9d11e8c2_amd64 as a component of Red Hat Openshift Data Foundation 4.18; registry.redhat.io/odf4/mcg-core-rhel9@sha256:86da6a6280816bc50f36041e7a979274c3a5b27a63bccf15507e1f66afb49464_s390x as a component of Red Hat Openshift Data Foundation 4.18; registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0b4d42e8e476f817548053fc8363084c60e7c4c8278fdad46f89752c422318f7_amd64 as a component of Red Hat Openshift Data Foundation 4.18; registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0bdec5fd8a2a4df637a6dbe6da3c7aa7dd98e424f6ccac1b666069240c3c6a2b_s390x as a component of Red Hat Openshift Data Foundation 4.18; registry.redhat.io/odf4/mcg-rhel9-operator@sha256:55d1e96c46d7e18200d64878901161cad4a2e5ddb1bd2ab35e21d0e63743db4a_ppc64le as a component of Red Hat Openshift Data Foundation 4.18; registry.redhat.io/odf4/mcg-rhel9-operator@sha256:65e384de217a7ac0752bd0bd7e39f2a16d3d55023b7e389dbfd6223e3050caef_arm64 as a component of Red Hat Openshift Data Foundation 4.18; registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:13e09d8d7196c9c24af4756aecc76226f5193a6fb8efd6314d72afb1ee8b08af_ppc64le as a component of Red Hat Openshift Data Foundation 4.18; registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:339175c0cf3bfc97a1b5f1fd40be12b124b9eadd7e3990b40c01cc2c8f202088_amd64 as a component of Red Hat Openshift Data Foundation 4.18; registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:bb3516bbf6e6eeb5a9949de05c19d80a903533c0fcf4a756ff7f68af793a516c_s390x as a component of Red Hat Openshift Data Foundation 4.18; registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:06e77572fb0925499e831cea92e04009dba079413374794f89087484bce54ac9_amd64 as a component of Red Hat Openshift Data Foundation 4.18; registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:8251a421792fffa707904b2d23b15b11fe0e2d85b526824e7c64d74c90a582d0_arm64 as a component of Red Hat Openshift Data Foundation 4.18; and 128 more
After
exploit-intelligence-tech-preview/agent-client-rhel9 as a component of Exploit Intelligence; gatekeeper/gatekeeper-rhel9 as a component of Gatekeeper 3; rhmtc/openshift-migration-ui-rhel8 as a component of Migration Toolkit for Containers; migration-toolkit-virtualization/mtv-console-plugin-rhel9 as a component of Migration Toolkit for Virtualization; mtv-candidate/mtv-console-plugin-rhel9 as a component of Migration Toolkit for Virtualization; multicluster-engine/console-mce-rhel9 as a component of Multicluster Engine for Kubernetes; workload-availability/node-healthcheck-must-gather-rhel9 as a component of Node HealthCheck Operator; workload-availability/node-healthcheck-operator-bundle as a component of Node HealthCheck Operator; workload-availability/node-healthcheck-rhel9-operator as a component of Node HealthCheck Operator; openshift-pipelines/pipelines-console-plugin-pf5-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-console-plugin-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-console-plugin-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-hub-ui-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-hub-ui-rhel9 as a component of OpenShift Pipelines; openshift-service-mesh/kiali-rhel8 as a component of OpenShift Service Mesh 2; redhat-user-workloads/console-acm-211 as a component of Red Hat Advanced Cluster Management for Kubernetes 2; redhat-user-workloads/console-acm-212 as a component of Red Hat Advanced Cluster Management for Kubernetes 2; redhat-user-workloads/console-acm-213 as a component of Red Hat Advanced Cluster Management for Kubernetes 2; rhacm2/console-rhel9 as a component of Red Hat Advanced Cluster Management for Kubernetes 2; advanced-cluster-security/rhacs-main-rhel8 as a component of Red Hat Advanced Cluster Security 4; ansible-automation-platform-26/gateway-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-27/gateway-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-on-clouds/aoc-azure-aap-installer-rhel9 as a component of Red Hat Ansible Automation Platform 2; automation-controller.src as a component of Red Hat Ansible Automation Platform 2; automation-eda-controller.src as a component of Red Hat Ansible Automation Platform 2; automation-gateway.src as a component of Red Hat Ansible Automation Platform 2; automation-hub.src as a component of Red Hat Ansible Automation Platform 2; automation-platform-ui.src as a component of Red Hat Ansible Automation Platform 2; python-galaxy-ng.src as a component of Red Hat Ansible Automation Platform 2; python3.11-galaxy-ng.src as a component of Red Hat Ansible Automation Platform 2; and 99 more · Fixed: Red Hat Data Grid 8.6.2; registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64 as a component of Red Hat Migration Toolkit for Applications 8.1; registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64 as a component of Red Hat Migration Toolkit for Applications 8.1; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4a475dd6221080671c742651eede4964956caf997fa84f10c1c889b4bb2eb935_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:c7daef8e89de0e096983b72e81eeae966cea075874f1ddc498e0f92b9d5a278d_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:dbaf78b7927d84af5cb0839937541970959ad7c22238e0ba1128eaf7605968b2_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:f3ee104a6bda47b1fd75494d5cde518327d39a5b1e3db2353e3103a77d75baf0_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-gen-ai-rhel9@sha256:9915f3fc3c46d344a564fdacdd664693bf50959529b7caa764b55af87f2d0be1_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-gen-ai-rhel9@sha256:998798f4223dd67b817ddf50b678cdeced3ed2cf187151a9168bf654e50fddf3_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-gen-ai-rhel9@sha256:b540bd6da922dadab8137f80eb64469d0ff4c3bc5db3a6be376a1165a5b03ad6_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-gen-ai-rhel9@sha256:c2f6c90207a43ca340bbec37b7d7924bf4bce20017f3dd4ec796d83d3ba4ef14_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9@sha256:33ca5bc60d35bef45d2c5431455a2343c33ff4f68206a204fa5dcbbef1c8fd61_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9@sha256:4453996c789675875e7081eed144105605de179bde845700bf1fc1673cfaa081_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9@sha256:69ed79480a404bbc4914048bc39cb57b4face422c84211fb946acbe14c36ae7c_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9@sha256:e24d5ac46b063c86c829a7fc2699659324e6d403ede258e7bb20b8262a0e08a7_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-mlflow-rhel9@sha256:3aa0c135e75b993c2c186f0c5c5a4c9ac6159e68381a43ca0a22c8519325d956_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-mlflow-rhel9@sha256:5ffaed7dea59ce416c98d3e4d902c129f8fa96c05905796175516c97bc04a2ac_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-mlflow-rhel9@sha256:70b95eb59e00d862238b91e414d4dad03192a9d2305d1cca75a12f1fc287e25e_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-mlflow-rhel9@sha256:cf14313872b203fed61a3d42252e1b315a7a6196fa4d442d50008609b7abaf0d_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:202f8404abdd76d8c4b8135ec8eeb7386739c32144f6f778bdcbdfcf53c8509c_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:a17863e91facfeb761fd6e5416b284c00479c3687dab2c7e9672ebeaa2256fe0_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:e7aa026fc1676f479adc449a9d3d2289d0cf6e746c73ba435f902ceef41c0219_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f2fdc213486ce88a40ec2e6484567d26e58dee9024e386b16c4445ee688e44f8_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/devspaces/dashboard-rhel9@sha256:35e473eed97efe209e4b0f064e9b4d7441b0391f3d66634b1267d1f942a53bae_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/dashboard-rhel9@sha256:4da408d8b9dd1368285e5f289dd89ab2f86f069e50d88b1241e997b88edbf7ed_amd64 as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/dashboard-rhel9@sha256:6af7182edffac5d714a9943782e319ab0cc303799df7aaf1593f5eefed9fe3b9_arm64 as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/dashboard-rhel9@sha256:aa822e3f4d4456b6b32607b38f2c121188cd6f3d63b13d876f5b0c206eb2478b_s390x as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/openvsx-rhel9@sha256:0387c27ab77bb1900d35259943a6ead5be0402ceb7cc5824eed2f47bfd1f2ef4_arm64 as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/openvsx-rhel9@sha256:26167c95c1f10106c23f1e93da0f57b4f5f59145927f4141f45b75d3b420d216_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/openvsx-rhel9@sha256:550a66cf7c4375aa2bbce551c2c53ca1bfaf98928e5263a73ca63e6f0862e936_amd64 as a component of Red Hat OpenShift Dev Spaces 3.29; and 148 more
Affected versionsThe structured affected or fixed version information changed.
Before
exploit-intelligence-tech-preview/agent-client-rhel9 as a component of Exploit Intelligence; gatekeeper/gatekeeper-rhel9 as a component of Gatekeeper 3; rhmtc/openshift-migration-ui-rhel8 as a component of Migration Toolkit for Containers; migration-toolkit-virtualization/mtv-console-plugin-rhel9 as a component of Migration Toolkit for Virtualization; mtv-candidate/mtv-console-plugin-rhel9 as a component of Migration Toolkit for Virtualization; multicluster-engine/console-mce-rhel9 as a component of Multicluster Engine for Kubernetes; workload-availability/node-healthcheck-must-gather-rhel9 as a component of Node HealthCheck Operator; workload-availability/node-healthcheck-operator-bundle as a component of Node HealthCheck Operator; workload-availability/node-healthcheck-rhel9-operator as a component of Node HealthCheck Operator; openshift-pipelines/pipelines-console-plugin-pf5-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-console-plugin-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-console-plugin-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-hub-ui-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-hub-ui-rhel9 as a component of OpenShift Pipelines; openshift-service-mesh/kiali-rhel8 as a component of OpenShift Service Mesh 2; redhat-user-workloads/console-acm-211 as a component of Red Hat Advanced Cluster Management for Kubernetes 2; redhat-user-workloads/console-acm-212 as a component of Red Hat Advanced Cluster Management for Kubernetes 2; redhat-user-workloads/console-acm-213 as a component of Red Hat Advanced Cluster Management for Kubernetes 2; rhacm2/console-rhel9 as a component of Red Hat Advanced Cluster Management for Kubernetes 2; advanced-cluster-security/rhacs-main-rhel8 as a component of Red Hat Advanced Cluster Security 4; ansible-automation-platform-26/gateway-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-27/gateway-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-on-clouds/aoc-azure-aap-installer-rhel9 as a component of Red Hat Ansible Automation Platform 2; automation-controller.src as a component of Red Hat Ansible Automation Platform 2; automation-eda-controller.src as a component of Red Hat Ansible Automation Platform 2; automation-gateway.src as a component of Red Hat Ansible Automation Platform 2; automation-hub.src as a component of Red Hat Ansible Automation Platform 2; automation-platform-ui.src as a component of Red Hat Ansible Automation Platform 2; python-galaxy-ng.src as a component of Red Hat Ansible Automation Platform 2; python3.11-galaxy-ng.src as a component of Red Hat Ansible Automation Platform 2; and 107 more · Fixed: Red Hat Data Grid 8.6.2; registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64 as a component of Red Hat Migration Toolkit for Applications 8.1; registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64 as a component of Red Hat Migration Toolkit for Applications 8.1; registry.redhat.io/devspaces/dashboard-rhel9@sha256:35e473eed97efe209e4b0f064e9b4d7441b0391f3d66634b1267d1f942a53bae_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/dashboard-rhel9@sha256:4da408d8b9dd1368285e5f289dd89ab2f86f069e50d88b1241e997b88edbf7ed_amd64 as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/dashboard-rhel9@sha256:6af7182edffac5d714a9943782e319ab0cc303799df7aaf1593f5eefed9fe3b9_arm64 as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/dashboard-rhel9@sha256:aa822e3f4d4456b6b32607b38f2c121188cd6f3d63b13d876f5b0c206eb2478b_s390x as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/openvsx-rhel9@sha256:0387c27ab77bb1900d35259943a6ead5be0402ceb7cc5824eed2f47bfd1f2ef4_arm64 as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/openvsx-rhel9@sha256:26167c95c1f10106c23f1e93da0f57b4f5f59145927f4141f45b75d3b420d216_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/openvsx-rhel9@sha256:550a66cf7c4375aa2bbce551c2c53ca1bfaf98928e5263a73ca63e6f0862e936_amd64 as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/openvsx-rhel9@sha256:d9694d9deba2a2ce2458a54d1cb15462374778d072a5974628e027add1ad7704_s390x as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64 as a component of Red Hat Trusted Artifact Signer 1.3
After
exploit-intelligence-tech-preview/agent-client-rhel9 as a component of Exploit Intelligence; gatekeeper/gatekeeper-rhel9 as a component of Gatekeeper 3; rhmtc/openshift-migration-ui-rhel8 as a component of Migration Toolkit for Containers; migration-toolkit-virtualization/mtv-console-plugin-rhel9 as a component of Migration Toolkit for Virtualization; mtv-candidate/mtv-console-plugin-rhel9 as a component of Migration Toolkit for Virtualization; multicluster-engine/console-mce-rhel9 as a component of Multicluster Engine for Kubernetes; workload-availability/node-healthcheck-must-gather-rhel9 as a component of Node HealthCheck Operator; workload-availability/node-healthcheck-operator-bundle as a component of Node HealthCheck Operator; workload-availability/node-healthcheck-rhel9-operator as a component of Node HealthCheck Operator; openshift-pipelines/pipelines-console-plugin-pf5-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-console-plugin-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-console-plugin-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-hub-ui-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-hub-ui-rhel9 as a component of OpenShift Pipelines; openshift-service-mesh/kiali-rhel8 as a component of OpenShift Service Mesh 2; redhat-user-workloads/console-acm-211 as a component of Red Hat Advanced Cluster Management for Kubernetes 2; redhat-user-workloads/console-acm-212 as a component of Red Hat Advanced Cluster Management for Kubernetes 2; redhat-user-workloads/console-acm-213 as a component of Red Hat Advanced Cluster Management for Kubernetes 2; rhacm2/console-rhel9 as a component of Red Hat Advanced Cluster Management for Kubernetes 2; advanced-cluster-security/rhacs-main-rhel8 as a component of Red Hat Advanced Cluster Security 4; ansible-automation-platform-26/gateway-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-27/gateway-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-on-clouds/aoc-azure-aap-installer-rhel9 as a component of Red Hat Ansible Automation Platform 2; automation-controller.src as a component of Red Hat Ansible Automation Platform 2; automation-eda-controller.src as a component of Red Hat Ansible Automation Platform 2; automation-gateway.src as a component of Red Hat Ansible Automation Platform 2; automation-hub.src as a component of Red Hat Ansible Automation Platform 2; automation-platform-ui.src as a component of Red Hat Ansible Automation Platform 2; python-galaxy-ng.src as a component of Red Hat Ansible Automation Platform 2; python3.11-galaxy-ng.src as a component of Red Hat Ansible Automation Platform 2; and 104 more · Fixed: Red Hat Data Grid 8.6.2; registry.redhat.io/mta/mta-ui-rhel9@sha256:32b552436a7fe57fafdeb1c2383b3a98a91123e7c1f38511b8c47eb76a8b2b29_amd64 as a component of Red Hat Migration Toolkit for Applications 8.1; registry.redhat.io/mta/mta-ui-rhel9@sha256:8e12baafaf77888b636adf49cb1f054746e5ab0a2de9ce42229403766389f6fd_arm64 as a component of Red Hat Migration Toolkit for Applications 8.1; registry.redhat.io/devspaces/dashboard-rhel9@sha256:35e473eed97efe209e4b0f064e9b4d7441b0391f3d66634b1267d1f942a53bae_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/dashboard-rhel9@sha256:4da408d8b9dd1368285e5f289dd89ab2f86f069e50d88b1241e997b88edbf7ed_amd64 as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/dashboard-rhel9@sha256:6af7182edffac5d714a9943782e319ab0cc303799df7aaf1593f5eefed9fe3b9_arm64 as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/dashboard-rhel9@sha256:aa822e3f4d4456b6b32607b38f2c121188cd6f3d63b13d876f5b0c206eb2478b_s390x as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/openvsx-rhel9@sha256:0387c27ab77bb1900d35259943a6ead5be0402ceb7cc5824eed2f47bfd1f2ef4_arm64 as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/openvsx-rhel9@sha256:26167c95c1f10106c23f1e93da0f57b4f5f59145927f4141f45b75d3b420d216_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/openvsx-rhel9@sha256:550a66cf7c4375aa2bbce551c2c53ca1bfaf98928e5263a73ca63e6f0862e936_amd64 as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/devspaces/openvsx-rhel9@sha256:d9694d9deba2a2ce2458a54d1cb15462374778d072a5974628e027add1ad7704_s390x as a component of Red Hat OpenShift Dev Spaces 3.29; registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:21b851833c425cd0638fa0d97672b30481fe6196a38817955500f10f3516acaa_arm64 as a component of Red Hat Openshift Data Foundation 4.18; registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:4e29a09b15c2149d96e02b302dfa5c89d88e647467427f251d7dcc949710a153_s390x as a component of Red Hat Openshift Data Foundation 4.18; registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:7bbc972cffbd7c92a685e1cfb73365b261908046ccd7b712659b9b47737dfafa_ppc64le as a component of Red Hat Openshift Data Foundation 4.18; registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:dd66f2aabe08104f33b6ed32786947f9b91c37404d06b46838397c8c791dad0a_amd64 as a component of Red Hat Openshift Data Foundation 4.18; registry.redhat.io/odf4/cephcsi-rhel9@sha256:5e63bdd0b4345a25ed76efcc62a068f88b0c688328713e1711ca4cac73f96d76_s390x as a component of Red Hat Openshift Data Foundation 4.18; registry.redhat.io/odf4/cephcsi-rhel9@sha256:5eeddca3c800ec55d4d7dd479cfcd1751394b40e481b86433cd3838d2170952c_ppc64le as a component of Red Hat Openshift Data Foundation 4.18; registry.redhat.io/odf4/cephcsi-rhel9@sha256:fd06b75eb32cf69d0ab0c18eb922d540f0362d12aec3a9029fa77e13f307cb3f_amd64 as a component of Red Hat Openshift Data Foundation 4.18; registry.redhat.io/odf4/mcg-core-rhel9@sha256:2156c85468c3bd37a4a9cec2538aaf529fc4317b1cd56705c4f39247dbc1d1ff_ppc64le as a component of Red Hat Openshift Data Foundation 4.18; registry.redhat.io/odf4/mcg-core-rhel9@sha256:3701ca9bcf39e032702226a25a2d1a1ceedb2c9dc9e5bcfedc0104ad9d11e8c2_amd64 as a component of Red Hat Openshift Data Foundation 4.18; registry.redhat.io/odf4/mcg-core-rhel9@sha256:86da6a6280816bc50f36041e7a979274c3a5b27a63bccf15507e1f66afb49464_s390x as a component of Red Hat Openshift Data Foundation 4.18; registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0b4d42e8e476f817548053fc8363084c60e7c4c8278fdad46f89752c422318f7_amd64 as a component of Red Hat Openshift Data Foundation 4.18; registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0bdec5fd8a2a4df637a6dbe6da3c7aa7dd98e424f6ccac1b666069240c3c6a2b_s390x as a component of Red Hat Openshift Data Foundation 4.18; registry.redhat.io/odf4/mcg-rhel9-operator@sha256:55d1e96c46d7e18200d64878901161cad4a2e5ddb1bd2ab35e21d0e63743db4a_ppc64le as a component of Red Hat Openshift Data Foundation 4.18; registry.redhat.io/odf4/mcg-rhel9-operator@sha256:65e384de217a7ac0752bd0bd7e39f2a16d3d55023b7e389dbfd6223e3050caef_arm64 as a component of Red Hat Openshift Data Foundation 4.18; registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:13e09d8d7196c9c24af4756aecc76226f5193a6fb8efd6314d72afb1ee8b08af_ppc64le as a component of Red Hat Openshift Data Foundation 4.18; registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:339175c0cf3bfc97a1b5f1fd40be12b124b9eadd7e3990b40c01cc2c8f202088_amd64 as a component of Red Hat Openshift Data Foundation 4.18; registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:bb3516bbf6e6eeb5a9949de05c19d80a903533c0fcf4a756ff7f68af793a516c_s390x as a component of Red Hat Openshift Data Foundation 4.18; registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:06e77572fb0925499e831cea92e04009dba079413374794f89087484bce54ac9_amd64 as a component of Red Hat Openshift Data Foundation 4.18; registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:8251a421792fffa707904b2d23b15b11fe0e2d85b526824e7c64d74c90a582d0_arm64 as a component of Red Hat Openshift Data Foundation 4.18; and 128 more
Technical terms and abbreviations used in this report
CVE
Common Vulnerabilities and Exposures: the public identifier for one disclosed vulnerability.
CVSS
Common Vulnerability Scoring System: a technical severity framework; it is not patching priority by itself.
EPSS
Exploit Prediction Scoring System: FIRST's estimate of the probability that exploitation activity will be observed in the next 30 days; it is a forecast, not confirmation.
CWE
Common Weakness Enumeration: the standard category describing the underlying software or hardware weakness.
CNA
CVE Numbering Authority: an organisation authorised to assign and publish CVE records.
CISA ADP
Cybersecurity and Infrastructure Security Agency Authorized Data Publisher: structured enrichment added to a CVE record.
NVD
National Vulnerability Database: NIST's enrichment service for CVE records.
CERT / CSIRT
A computer security incident response team that publishes warnings or coordinates incident response.
PoC
Proof of concept: public material that demonstrates or helps reproduce exploitation.
CSAF
Common Security Advisory Framework: a machine-readable format for security advisories.
LoTL
Living off the land: abuse of legitimate tools or system functions during an attack.