{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "Copyright © Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-71319.json" } ], "title": "image-size: image-size: Denial of Service due to infinite loop when processing specially crafted images.", "tracking": { "current_release_date": "2026-09-02T17:54:39+00:00", "generator": { "date": "2026-09-02T17:54:39+00:00", "engine": { "name": "Red Hat SDEngine", "version": "5.3.16" } }, "id": "CVE-2025-71319", "initial_release_date": "2025-01-01T00:00:00+00:00", "revision_history": [ { "date": "2025-01-01T00:00:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2026-08-05T14:28:26.452945+00:00", "number": "2", "summary": "Current version" }, { "date": "2026-09-02T17:54:39+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Gatekeeper 3", "product": { "name": "Gatekeeper 3", "product_id": "gatekeeper_3", "product_identification_helper": { "cpe": "cpe:/a:redhat:gatekeeper:3" } } } ], "category": "product_family", "name": "Gatekeeper 3" }, { "branches": [ { "category": "product_name", "name": "Red Hat Build of Podman Desktop", "product": { "name": "Red Hat Build of Podman Desktop", "product_id": "red_hat_build_of_podman_desktop", "product_identification_helper": { "cpe": "cpe:/a:redhat:podman_desktop:1" } } } ], "category": "product_family", "name": "Red Hat Build of Podman Desktop" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 7", "product": { "name": "Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux 7" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 8", "product": { "name": "Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:8" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux 8" }, { "branches": [ { "category": "product_name", "name": "Red Hat Fuse 7", "product": { "name": "Red Hat Fuse 7", "product_id": "red_hat_fuse_7", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_fuse:7" } } } ], "category": "product_family", "name": "Red Hat Fuse 7" }, { "branches": [ { "category": "product_name", "name": "Red Hat JBoss Enterprise Application Platform 7", "product": { "name": "Red Hat JBoss Enterprise Application Platform 7", "product_id": "red_hat_jboss_enterprise_application_platform_7", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7" } } } ], "category": "product_family", "name": "Red Hat JBoss Enterprise Application Platform 7" }, { "branches": [ { "category": "product_name", "name": "Red Hat JBoss Enterprise Application Platform 8", "product": { "name": "Red Hat JBoss Enterprise Application Platform 8", "product_id": "red_hat_jboss_enterprise_application_platform_8", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:8" } } } ], "category": "product_family", "name": "Red Hat JBoss Enterprise Application Platform 8" }, { "branches": [ { "category": "product_name", "name": "Red Hat JBoss Enterprise Application Platform Expansion Pack", "product": { "name": "Red Hat JBoss Enterprise Application Platform Expansion Pack", "product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack", "product_identification_helper": { "cpe": "cpe:/a:redhat:jbosseapxp" } } } ], "category": "product_family", "name": "Red Hat JBoss Enterprise Application Platform Expansion Pack" }, { "branches": [ { "category": "product_name", "name": "Red Hat OpenShift AI (RHOAI)", "product": { "name": "Red Hat OpenShift AI (RHOAI)", "product_id": "red_hat_openshift_ai_(rhoai)", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift_ai" } } } ], "category": "product_family", "name": "Red Hat OpenShift AI (RHOAI)" }, { "branches": [ { "category": "product_name", "name": "Red Hat OpenShift Dev Spaces", "product": { "name": "Red Hat OpenShift Dev Spaces", "product_id": "red_hat_openshift_dev_spaces", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift_devspaces:3" } } } ], "category": "product_family", "name": "Red Hat OpenShift Dev Spaces" }, { "branches": [ { "category": "product_name", "name": "Red Hat Satellite 6", "product": { "name": "Red Hat Satellite 6", "product_id": "red_hat_satellite_6", "product_identification_helper": { "cpe": "cpe:/a:redhat:satellite:6" } } } ], "category": "product_family", "name": "Red Hat Satellite 6" }, { "branches": [ { "category": "product_name", "name": "Red Hat Trusted Artifact Signer 1.4", "product": { "name": "Red Hat Trusted Artifact Signer 1.4", "product_id": "Red Hat Trusted Artifact Signer 1.4", "product_identification_helper": { "cpe": "cpe:/a:redhat:trusted_artifact_signer:1.4::el9" } } } ], "category": "product_family", "name": "Red Hat Trusted Artifact Signer" }, { "branches": [ { "category": "product_name", "name": "Red Hat Discovery 2", "product": { "name": "Red Hat Discovery 2", "product_id": "Red Hat Discovery 2", "product_identification_helper": { "cpe": "cpe:/a:redhat:discovery:2::el9" } } } ], "category": "product_family", "name": "Red Hat Discovery" }, { "category": "product_version", "name": "gatekeeper/gatekeeper-rhel9", "product": { "name": "gatekeeper/gatekeeper-rhel9", "product_id": "gatekeeper/gatekeeper-rhel9", "product_identification_helper": { "purl": "pkg:oci/gatekeeper-rhel9?repository_url=registry.redhat.io/gatekeeper/gatekeeper-rhel9" } } }, { "category": "product_version", "name": "rh-podman-desktop.git", "product": { "name": "rh-podman-desktop.git", "product_id": "rh-podman-desktop.git", "product_identification_helper": { "purl": "pkg:npm/rh-podman-desktop.git?vcs_url=https://gitlab.cee.redhat.com/red-hat-desktop/rh-podman-desktop.git" } } }, { "category": "product_version", "name": "subscription-manager-rhsm-certificates", "product": { "name": "subscription-manager-rhsm-certificates", "product_id": "subscription-manager-rhsm-certificates", "product_identification_helper": { "purl": "pkg:rpm/redhat/subscription-manager-rhsm-certificates" } } }, { "category": "product_version", "name": "subscription-manager", "product": { "name": "subscription-manager", "product_id": "subscription-manager", "product_identification_helper": { "purl": "pkg:rpm/redhat/subscription-manager" } } }, { "category": "product_version", "name": "subscription-manager-cockpit", "product": { "name": "subscription-manager-cockpit", "product_id": "subscription-manager-cockpit", "product_identification_helper": { "purl": "pkg:rpm/redhat/subscription-manager-cockpit" } } }, { "category": "product_version", "name": "subscription-manager-rhsm", "product": { "name": "subscription-manager-rhsm", "product_id": "subscription-manager-rhsm", "product_identification_helper": { "purl": "pkg:rpm/redhat/subscription-manager-rhsm" } } }, { "category": "product_version", "name": "subscription-manager-plugin-container", "product": { "name": "subscription-manager-plugin-container", "product_id": "subscription-manager-plugin-container", "product_identification_helper": { "purl": "pkg:rpm/redhat/subscription-manager-plugin-container" } } }, { "category": "product_version", "name": "rhsm-gtk", "product": { "name": "rhsm-gtk", "product_id": "rhsm-gtk", "product_identification_helper": { "purl": "pkg:rpm/redhat/rhsm-gtk" } } }, { "category": "product_version", "name": "subscription-manager-migration", "product": { "name": "subscription-manager-migration", "product_id": "subscription-manager-migration", "product_identification_helper": { "purl": "pkg:rpm/redhat/subscription-manager-migration" } } }, { "category": "product_version", "name": "subscription-manager-initial-setup-addon", "product": { "name": "subscription-manager-initial-setup-addon", "product_id": "subscription-manager-initial-setup-addon", "product_identification_helper": { "purl": "pkg:rpm/redhat/subscription-manager-initial-setup-addon" } } }, { "category": "product_version", "name": "subscription-manager-gui", "product": { "name": "subscription-manager-gui", "product_id": "subscription-manager-gui", "product_identification_helper": { "purl": "pkg:rpm/redhat/subscription-manager-gui" } } }, { "category": "product_version", "name": "python-syspurpose", "product": { "name": "python-syspurpose", "product_id": "python-syspurpose", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-syspurpose" } } }, { "category": "product_version", "name": "subscription-manager-plugin-ostree", "product": { "name": "subscription-manager-plugin-ostree", "product_id": "subscription-manager-plugin-ostree", "product_identification_helper": { "purl": "pkg:rpm/redhat/subscription-manager-plugin-ostree" } } }, { "category": "product_version", "name": "subscription-manager.src", "product": { "name": "subscription-manager.src", "product_id": "subscription-manager.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/subscription-manager?arch=src" } } }, { "category": "product_version", "name": "grafana-mssql", "product": { "name": "grafana-mssql", "product_id": "grafana-mssql", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-mssql" } } }, { "category": "product_version", "name": "grafana-loki", "product": { "name": "grafana-loki", "product_id": "grafana-loki", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-loki" } } }, { "category": "product_version", "name": "grafana-postgres", "product": { "name": "grafana-postgres", "product_id": "grafana-postgres", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-postgres" } } }, { "category": "product_version", "name": "grafana.src", "product": { "name": "grafana.src", "product_id": "grafana.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana?arch=src" } } }, { "category": "product_version", "name": "grafana-elasticsearch", "product": { "name": "grafana-elasticsearch", "product_id": "grafana-elasticsearch", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-elasticsearch" } } }, { "category": "product_version", "name": "grafana-selinux", "product": { "name": "grafana-selinux", "product_id": "grafana-selinux", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-selinux" } } }, { "category": "product_version", "name": "grafana-prometheus", "product": { "name": "grafana-prometheus", "product_id": "grafana-prometheus", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-prometheus" } } }, { "category": "product_version", "name": "grafana-stackdriver", "product": { "name": "grafana-stackdriver", "product_id": "grafana-stackdriver", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-stackdriver" } } }, { "category": "product_version", "name": "grafana-mysql", "product": { "name": "grafana-mysql", "product_id": "grafana-mysql", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-mysql" } } }, { "category": "product_version", "name": "grafana-cloudwatch", "product": { "name": "grafana-cloudwatch", "product_id": "grafana-cloudwatch", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-cloudwatch" } } }, { "category": "product_version", "name": "grafana-azure-monitor", "product": { "name": "grafana-azure-monitor", "product_id": "grafana-azure-monitor", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-azure-monitor" } } }, { "category": "product_version", "name": "grafana", "product": { "name": "grafana", "product_id": "grafana", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana" } } }, { "category": "product_version", "name": "grafana-influxdb", "product": { "name": "grafana-influxdb", "product_id": "grafana-influxdb", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-influxdb" } } }, { "category": "product_version", "name": "grafana-opentsdb", "product": { "name": "grafana-opentsdb", "product_id": "grafana-opentsdb", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-opentsdb" } } }, { "category": "product_version", "name": "grafana-graphite", "product": { "name": "grafana-graphite", "product_id": "grafana-graphite", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-graphite" } } }, { "category": "product_version", "name": "grafana-pcp.src", "product": { "name": "grafana-pcp.src", "product_id": "grafana-pcp.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-pcp?arch=src" } } }, { "category": "product_version", "name": "grafana-pcp", "product": { "name": "grafana-pcp", "product_id": "grafana-pcp", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-pcp" } } }, { "category": "product_version", "name": "python3-syspurpose", "product": { "name": "python3-syspurpose", "product_id": "python3-syspurpose", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-syspurpose" } } }, { "category": "product_version", "name": "python3-cloud-what", "product": { "name": "python3-cloud-what", "product_id": "python3-cloud-what", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-cloud-what" } } }, { "category": "product_version", "name": "python3-subscription-manager-rhsm", "product": { "name": "python3-subscription-manager-rhsm", "product_id": "python3-subscription-manager-rhsm", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-subscription-manager-rhsm" } } }, { "category": "product_version", "name": "rhsm-icons", "product": { "name": "rhsm-icons", "product_id": "rhsm-icons", "product_identification_helper": { "purl": "pkg:rpm/redhat/rhsm-icons" } } }, { "category": "product_version", "name": "dnf-plugin-subscription-manager", "product": { "name": "dnf-plugin-subscription-manager", "product_id": "dnf-plugin-subscription-manager", "product_identification_helper": { "purl": "pkg:rpm/redhat/dnf-plugin-subscription-manager" } } }, { "category": "product_version", "name": "image-size", "product": { "name": "image-size", "product_id": "image-size", "product_identification_helper": { "purl": "pkg:npm/image-size" } } }, { "category": "product_version", "name": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9", "product": { "name": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9", "product_id": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9", "product_identification_helper": { "purl": "pkg:oci/odh-workbench-codeserver-datascience-cpu-py312-rhel9?repository_url=registry.redhat.io/rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9" } } }, { "category": "product_version", "name": "devspaces/code-rhel9", "product": { "name": "devspaces/code-rhel9", "product_id": "devspaces/code-rhel9", "product_identification_helper": { "purl": "pkg:oci/code-rhel9?repository_url=registry.redhat.io/devspaces/code-rhel9" } } }, { "category": "product_version", "name": "satellite/iop-vulnerability-frontend-rhel9", "product": { "name": "satellite/iop-vulnerability-frontend-rhel9", "product_id": "satellite/iop-vulnerability-frontend-rhel9", "product_identification_helper": { "purl": "pkg:oci/iop-vulnerability-frontend-rhel9?repository_url=registry.redhat.io/satellite/iop-vulnerability-frontend-rhel9" } } }, { "branches": [ { "category": "product_version", "name": "registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64", "product": { "name": "registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64", "product_id": "registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64", "product_identification_helper": { "purl": "pkg:oci/rekor-backfill-redis-rhel9@sha256%3Ac34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9?arch=amd64&repository_url=registry.redhat.io/rhtas/rekor-backfill-redis-rhel9&tag=1783332625" } } }, { "category": "product_version", "name": "registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64", "product": { "name": "registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64", "product_id": "registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64", "product_identification_helper": { "purl": "pkg:oci/certificate-transparency-rhel9@sha256%3A428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d?arch=amd64&repository_url=registry.redhat.io/rhtas/certificate-transparency-rhel9&tag=1783326748" } } }, { "category": "product_version", "name": "registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64", "product": { "name": "registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64", "product_id": "registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64", "product_identification_helper": { "purl": "pkg:oci/trillian-database-rhel9@sha256%3Ab5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521?arch=amd64&repository_url=registry.redhat.io/rhtas/trillian-database-rhel9&tag=1783329793" } } }, { "category": "product_version", "name": "registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64", "product": { "name": "registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64", "product_id": "registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64", "product_identification_helper": { "purl": "pkg:oci/fulcio-rhel9@sha256%3A9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71?arch=amd64&repository_url=registry.redhat.io/rhtas/fulcio-rhel9&tag=1783326847" } } }, { "category": "product_version", "name": "registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64", "product": { "name": "registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64", "product_id": "registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64", "product_identification_helper": { "purl": "pkg:oci/trillian-logserver-rhel9@sha256%3A6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d?arch=amd64&repository_url=registry.redhat.io/rhtas/trillian-logserver-rhel9&tag=1783329793" } } }, { "category": "product_version", "name": "registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64", "product": { "name": "registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64", "product_id": "registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64", "product_identification_helper": { "purl": "pkg:oci/trillian-logsigner-rhel9@sha256%3A613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6?arch=amd64&repository_url=registry.redhat.io/rhtas/trillian-logsigner-rhel9&tag=1783329793" } } }, { "category": "product_version", "name": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64", "product": { "name": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64", "product_id": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64", "product_identification_helper": { "purl": "pkg:oci/trillian-redis-rhel9@sha256%3Afd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa?arch=amd64&repository_url=registry.redhat.io/rhtas/trillian-redis-rhel9&tag=1783329793" } } }, { "category": "product_version", "name": "registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64", "product": { "name": "registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64", "product_id": "registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64", "product_identification_helper": { "purl": "pkg:oci/rekor-search-ui-rhel9@sha256%3Ac0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b?arch=amd64&repository_url=registry.redhat.io/rhtas/rekor-search-ui-rhel9&tag=1783327185" } } }, { "category": "product_version", "name": "registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64", "product": { "name": "registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64", "product_id": "registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64", "product_identification_helper": { "purl": "pkg:oci/rekor-server-rhel9@sha256%3A938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67?arch=amd64&repository_url=registry.redhat.io/rhtas/rekor-server-rhel9&tag=1783332625" } } }, { "category": "product_version", "name": "registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64", "product": { "name": "registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64", "product_id": "registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64", "product_identification_helper": { "purl": "pkg:oci/timestamp-authority-rhel9@sha256%3A5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf?arch=amd64&repository_url=registry.redhat.io/rhtas/timestamp-authority-rhel9&tag=1783326690" } } }, { "category": "product_version", "name": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:7f4f6ce62705fe518e3513957b4205f106992cd42d1b07975d11aff2dc6ced66_amd64", "product": { "name": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:7f4f6ce62705fe518e3513957b4205f106992cd42d1b07975d11aff2dc6ced66_amd64", "product_id": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:7f4f6ce62705fe518e3513957b4205f106992cd42d1b07975d11aff2dc6ced66_amd64", "product_identification_helper": { "purl": "pkg:oci/discovery-server-rhel9@sha256%3A7f4f6ce62705fe518e3513957b4205f106992cd42d1b07975d11aff2dc6ced66?arch=amd64&repository_url=registry.redhat.io/discovery/discovery-server-rhel9&tag=1782763840" } } }, { "category": "product_version", "name": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:e9614239f2c391d00779cf6c7b998400de90bafbda14aa034e09020723c25a70_amd64", "product": { "name": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:e9614239f2c391d00779cf6c7b998400de90bafbda14aa034e09020723c25a70_amd64", "product_id": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:e9614239f2c391d00779cf6c7b998400de90bafbda14aa034e09020723c25a70_amd64", "product_identification_helper": { "purl": "pkg:oci/discovery-ui-rhel9@sha256%3Ae9614239f2c391d00779cf6c7b998400de90bafbda14aa034e09020723c25a70?arch=amd64&repository_url=registry.redhat.io/discovery/discovery-ui-rhel9&tag=1782756541" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:6c26d60b5d8eb5a823be4d6e83f2ebb32f5d15216338b85eb4b08aca4dc9316d_arm64", "product": { "name": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:6c26d60b5d8eb5a823be4d6e83f2ebb32f5d15216338b85eb4b08aca4dc9316d_arm64", "product_id": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:6c26d60b5d8eb5a823be4d6e83f2ebb32f5d15216338b85eb4b08aca4dc9316d_arm64", "product_identification_helper": { "purl": "pkg:oci/discovery-server-rhel9@sha256%3A6c26d60b5d8eb5a823be4d6e83f2ebb32f5d15216338b85eb4b08aca4dc9316d?arch=arm64&repository_url=registry.redhat.io/discovery/discovery-server-rhel9&tag=1782763840" } } }, { "category": "product_version", "name": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:3152cbb7f8ab85315ebb95b9f5cd5793c40859ee4487587f16a525ac5d408a44_arm64", "product": { "name": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:3152cbb7f8ab85315ebb95b9f5cd5793c40859ee4487587f16a525ac5d408a44_arm64", "product_id": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:3152cbb7f8ab85315ebb95b9f5cd5793c40859ee4487587f16a525ac5d408a44_arm64", "product_identification_helper": { "purl": "pkg:oci/discovery-ui-rhel9@sha256%3A3152cbb7f8ab85315ebb95b9f5cd5793c40859ee4487587f16a525ac5d408a44?arch=arm64&repository_url=registry.redhat.io/discovery/discovery-ui-rhel9&tag=1782756541" } } } ], "category": "architecture", "name": "arm64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:6c26d60b5d8eb5a823be4d6e83f2ebb32f5d15216338b85eb4b08aca4dc9316d_arm64 as a component of Red Hat Discovery 2", "product_id": "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6c26d60b5d8eb5a823be4d6e83f2ebb32f5d15216338b85eb4b08aca4dc9316d_arm64" }, "product_reference": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:6c26d60b5d8eb5a823be4d6e83f2ebb32f5d15216338b85eb4b08aca4dc9316d_arm64", "relates_to_product_reference": "Red Hat Discovery 2" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:7f4f6ce62705fe518e3513957b4205f106992cd42d1b07975d11aff2dc6ced66_amd64 as a component of Red Hat Discovery 2", "product_id": "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:7f4f6ce62705fe518e3513957b4205f106992cd42d1b07975d11aff2dc6ced66_amd64" }, "product_reference": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:7f4f6ce62705fe518e3513957b4205f106992cd42d1b07975d11aff2dc6ced66_amd64", "relates_to_product_reference": "Red Hat Discovery 2" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:3152cbb7f8ab85315ebb95b9f5cd5793c40859ee4487587f16a525ac5d408a44_arm64 as a component of Red Hat Discovery 2", "product_id": "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:3152cbb7f8ab85315ebb95b9f5cd5793c40859ee4487587f16a525ac5d408a44_arm64" }, "product_reference": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:3152cbb7f8ab85315ebb95b9f5cd5793c40859ee4487587f16a525ac5d408a44_arm64", "relates_to_product_reference": "Red Hat Discovery 2" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:e9614239f2c391d00779cf6c7b998400de90bafbda14aa034e09020723c25a70_amd64 as a component of Red Hat Discovery 2", "product_id": "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:e9614239f2c391d00779cf6c7b998400de90bafbda14aa034e09020723c25a70_amd64" }, "product_reference": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:e9614239f2c391d00779cf6c7b998400de90bafbda14aa034e09020723c25a70_amd64", "relates_to_product_reference": "Red Hat Discovery 2" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64 as a component of Red Hat Trusted Artifact Signer 1.4", "product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64" }, "product_reference": "registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64", "relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64 as a component of Red Hat Trusted Artifact Signer 1.4", "product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64" }, "product_reference": "registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64", "relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64 as a component of Red Hat Trusted Artifact Signer 1.4", "product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64" }, "product_reference": "registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64", "relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64 as a component of Red Hat Trusted Artifact Signer 1.4", "product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64" }, "product_reference": "registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64", "relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64 as a component of Red Hat Trusted Artifact Signer 1.4", "product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64" }, "product_reference": "registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64", "relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64 as a component of Red Hat Trusted Artifact Signer 1.4", "product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64" }, "product_reference": "registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64", "relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64 as a component of Red Hat Trusted Artifact Signer 1.4", "product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64" }, "product_reference": "registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64", "relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64 as a component of Red Hat Trusted Artifact Signer 1.4", "product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64" }, "product_reference": "registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64", "relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64 as a component of Red Hat Trusted Artifact Signer 1.4", "product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64" }, "product_reference": "registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64", "relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64 as a component of Red Hat Trusted Artifact Signer 1.4", "product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64" }, "product_reference": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64", "relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4" }, { "category": "default_component_of", "full_product_name": { "name": "gatekeeper/gatekeeper-rhel9 as a component of Gatekeeper 3", "product_id": "gatekeeper_3:gatekeeper/gatekeeper-rhel9" }, "product_reference": "gatekeeper/gatekeeper-rhel9", "relates_to_product_reference": "gatekeeper_3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-podman-desktop.git as a component of Red Hat Build of Podman Desktop", "product_id": "red_hat_build_of_podman_desktop:rh-podman-desktop.git" }, "product_reference": "rh-podman-desktop.git", "relates_to_product_reference": "red_hat_build_of_podman_desktop" }, { "category": "default_component_of", "full_product_name": { "name": "python-syspurpose as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:python-syspurpose" }, "product_reference": "python-syspurpose", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "rhsm-gtk as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:rhsm-gtk" }, "product_reference": "rhsm-gtk", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "subscription-manager as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:subscription-manager" }, "product_reference": "subscription-manager", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "subscription-manager-cockpit as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:subscription-manager-cockpit" }, "product_reference": "subscription-manager-cockpit", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "subscription-manager-gui as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:subscription-manager-gui" }, "product_reference": "subscription-manager-gui", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "subscription-manager-initial-setup-addon as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:subscription-manager-initial-setup-addon" }, "product_reference": "subscription-manager-initial-setup-addon", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "subscription-manager-migration as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:subscription-manager-migration" }, "product_reference": "subscription-manager-migration", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "subscription-manager-plugin-container as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:subscription-manager-plugin-container" }, "product_reference": "subscription-manager-plugin-container", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "subscription-manager-plugin-ostree as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:subscription-manager-plugin-ostree" }, "product_reference": "subscription-manager-plugin-ostree", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "subscription-manager-rhsm as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:subscription-manager-rhsm" }, "product_reference": "subscription-manager-rhsm", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "subscription-manager-rhsm-certificates as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:subscription-manager-rhsm-certificates" }, "product_reference": "subscription-manager-rhsm-certificates", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "subscription-manager.src as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:subscription-manager.src" }, "product_reference": "subscription-manager.src", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "dnf-plugin-subscription-manager as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:dnf-plugin-subscription-manager" }, "product_reference": "dnf-plugin-subscription-manager", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana" }, "product_reference": "grafana", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-azure-monitor as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-azure-monitor" }, "product_reference": "grafana-azure-monitor", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-cloudwatch as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-cloudwatch" }, "product_reference": "grafana-cloudwatch", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-elasticsearch as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-elasticsearch" }, "product_reference": "grafana-elasticsearch", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-graphite as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-graphite" }, "product_reference": "grafana-graphite", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-influxdb as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-influxdb" }, "product_reference": "grafana-influxdb", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-loki as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-loki" }, "product_reference": "grafana-loki", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-mssql as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-mssql" }, "product_reference": "grafana-mssql", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-mysql as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-mysql" }, "product_reference": "grafana-mysql", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-opentsdb as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-opentsdb" }, "product_reference": "grafana-opentsdb", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-pcp as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-pcp" }, "product_reference": "grafana-pcp", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-pcp.src as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-pcp.src" }, "product_reference": "grafana-pcp.src", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-postgres as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-postgres" }, "product_reference": "grafana-postgres", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-prometheus as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-prometheus" }, "product_reference": "grafana-prometheus", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-selinux as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-selinux" }, "product_reference": "grafana-selinux", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-stackdriver as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-stackdriver" }, "product_reference": "grafana-stackdriver", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana.src as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana.src" }, "product_reference": "grafana.src", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-cloud-what as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:python3-cloud-what" }, "product_reference": "python3-cloud-what", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-subscription-manager-rhsm as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:python3-subscription-manager-rhsm" }, "product_reference": "python3-subscription-manager-rhsm", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-syspurpose as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:python3-syspurpose" }, "product_reference": "python3-syspurpose", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "rhsm-gtk as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:rhsm-gtk" }, "product_reference": "rhsm-gtk", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "rhsm-icons as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:rhsm-icons" }, "product_reference": "rhsm-icons", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "subscription-manager as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:subscription-manager" }, "product_reference": "subscription-manager", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "subscription-manager-cockpit as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:subscription-manager-cockpit" }, "product_reference": "subscription-manager-cockpit", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "subscription-manager-initial-setup-addon as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:subscription-manager-initial-setup-addon" }, "product_reference": "subscription-manager-initial-setup-addon", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "subscription-manager-migration as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:subscription-manager-migration" }, "product_reference": "subscription-manager-migration", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "subscription-manager-plugin-ostree as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:subscription-manager-plugin-ostree" }, "product_reference": "subscription-manager-plugin-ostree", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "subscription-manager-rhsm-certificates as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:subscription-manager-rhsm-certificates" }, "product_reference": "subscription-manager-rhsm-certificates", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "subscription-manager.src as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:subscription-manager.src" }, "product_reference": "subscription-manager.src", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "image-size as a component of Red Hat Fuse 7", "product_id": "red_hat_fuse_7:image-size" }, "product_reference": "image-size", "relates_to_product_reference": "red_hat_fuse_7" }, { "category": "default_component_of", "full_product_name": { "name": "image-size as a component of Red Hat JBoss Enterprise Application Platform 7", "product_id": "red_hat_jboss_enterprise_application_platform_7:image-size" }, "product_reference": "image-size", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_7" }, { "category": "default_component_of", "full_product_name": { "name": "image-size as a component of Red Hat JBoss Enterprise Application Platform 8", "product_id": "red_hat_jboss_enterprise_application_platform_8:image-size" }, "product_reference": "image-size", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_8" }, { "category": "default_component_of", "full_product_name": { "name": "image-size as a component of Red Hat JBoss Enterprise Application Platform Expansion Pack", "product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack:image-size" }, "product_reference": "image-size", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_expansion_pack" }, { "category": "default_component_of", "full_product_name": { "name": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)", "product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9" }, "product_reference": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9", "relates_to_product_reference": "red_hat_openshift_ai_(rhoai)" }, { "category": "default_component_of", "full_product_name": { "name": "devspaces/code-rhel9 as a component of Red Hat OpenShift Dev Spaces", "product_id": "red_hat_openshift_dev_spaces:devspaces/code-rhel9" }, "product_reference": "devspaces/code-rhel9", "relates_to_product_reference": "red_hat_openshift_dev_spaces" }, { "category": "default_component_of", "full_product_name": { "name": "satellite/iop-vulnerability-frontend-rhel9 as a component of Red Hat Satellite 6", "product_id": "red_hat_satellite_6:satellite/iop-vulnerability-frontend-rhel9" }, "product_reference": "satellite/iop-vulnerability-frontend-rhel9", "relates_to_product_reference": "red_hat_satellite_6" } ] }, "vulnerabilities": [ { "cve": "CVE-2025-71319", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition ('Infinite Loop')" }, "discovery_date": "2026-06-09T21:01:11.339286+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6c26d60b5d8eb5a823be4d6e83f2ebb32f5d15216338b85eb4b08aca4dc9316d_arm64", "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:7f4f6ce62705fe518e3513957b4205f106992cd42d1b07975d11aff2dc6ced66_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64", "red_hat_build_of_podman_desktop:rh-podman-desktop.git", "red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9", "red_hat_openshift_dev_spaces:devspaces/code-rhel9" ] }, { "label": "component_not_present", "product_ids": [ "red_hat_enterprise_linux_7:python-syspurpose", "red_hat_enterprise_linux_7:rhsm-gtk", "red_hat_enterprise_linux_7:subscription-manager", "red_hat_enterprise_linux_7:subscription-manager-cockpit", "red_hat_enterprise_linux_7:subscription-manager-gui", "red_hat_enterprise_linux_7:subscription-manager-initial-setup-addon", "red_hat_enterprise_linux_7:subscription-manager-migration", "red_hat_enterprise_linux_7:subscription-manager-plugin-container", "red_hat_enterprise_linux_7:subscription-manager-plugin-ostree", "red_hat_enterprise_linux_7:subscription-manager-rhsm", "red_hat_enterprise_linux_7:subscription-manager-rhsm-certificates", "red_hat_enterprise_linux_7:subscription-manager.src", "red_hat_enterprise_linux_8:grafana-pcp", "red_hat_enterprise_linux_8:grafana-pcp.src", "red_hat_jboss_enterprise_application_platform_7:image-size", "red_hat_jboss_enterprise_application_platform_8:image-size", "red_hat_jboss_enterprise_application_platform_expansion_pack:image-size" ] }, { "label": "vulnerable_code_not_in_execute_path", "product_ids": [ "red_hat_enterprise_linux_8:grafana", "red_hat_enterprise_linux_8:grafana-azure-monitor", "red_hat_enterprise_linux_8:grafana-cloudwatch", "red_hat_enterprise_linux_8:grafana-elasticsearch", "red_hat_enterprise_linux_8:grafana-graphite", "red_hat_enterprise_linux_8:grafana-influxdb", "red_hat_enterprise_linux_8:grafana-loki", "red_hat_enterprise_linux_8:grafana-mssql", "red_hat_enterprise_linux_8:grafana-mysql", "red_hat_enterprise_linux_8:grafana-opentsdb", "red_hat_enterprise_linux_8:grafana-postgres", "red_hat_enterprise_linux_8:grafana-prometheus", "red_hat_enterprise_linux_8:grafana-selinux", "red_hat_enterprise_linux_8:grafana-stackdriver", "red_hat_enterprise_linux_8:grafana.src", "red_hat_fuse_7:image-size" ] }, { "label": "vulnerable_code_cannot_be_controlled_by_adversary", "product_ids": [ "red_hat_satellite_6:satellite/iop-vulnerability-frontend-rhel9" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2487296" } ], "notes": [ { "category": "description", "text": "A flaw was found in image-size. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by supplying specially crafted JXL, HEIF, or JP2 image files that contain zero-sized boxes. The `findBox` function, responsible for image validation, enters an infinite loop when processing these malicious files, leading to an application hang. This can disrupt the availability of services relying on the image-size component.", "title": "Vulnerability description" }, { "category": "summary", "text": "image-size: image-size: Denial of Service due to infinite loop when processing specially crafted images.", "title": "Vulnerability summary" }, { "category": "other", "text": "This is an Important denial of service vulnerability in the `image-size` component, which can be triggered remotely by processing specially crafted JXL, HEIF, or JP2 image files containing zero-sized boxes. This flaw can lead to an application hang due to an infinite loop in the `findBox` function, impacting the availability of services that rely on this image processing library within Red Hat products.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:3152cbb7f8ab85315ebb95b9f5cd5793c40859ee4487587f16a525ac5d408a44_arm64", "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:e9614239f2c391d00779cf6c7b998400de90bafbda14aa034e09020723c25a70_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64" ], "known_affected": [ "gatekeeper_3:gatekeeper/gatekeeper-rhel9", "red_hat_enterprise_linux_8:dnf-plugin-subscription-manager", "red_hat_enterprise_linux_8:python3-cloud-what", "red_hat_enterprise_linux_8:python3-subscription-manager-rhsm", "red_hat_enterprise_linux_8:python3-syspurpose", "red_hat_enterprise_linux_8:rhsm-gtk", "red_hat_enterprise_linux_8:rhsm-icons", "red_hat_enterprise_linux_8:subscription-manager", "red_hat_enterprise_linux_8:subscription-manager-cockpit", "red_hat_enterprise_linux_8:subscription-manager-initial-setup-addon", "red_hat_enterprise_linux_8:subscription-manager-migration", "red_hat_enterprise_linux_8:subscription-manager-plugin-ostree", "red_hat_enterprise_linux_8:subscription-manager-rhsm-certificates", "red_hat_enterprise_linux_8:subscription-manager.src" ], "known_not_affected": [ "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6c26d60b5d8eb5a823be4d6e83f2ebb32f5d15216338b85eb4b08aca4dc9316d_arm64", "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:7f4f6ce62705fe518e3513957b4205f106992cd42d1b07975d11aff2dc6ced66_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64", "red_hat_build_of_podman_desktop:rh-podman-desktop.git", "red_hat_enterprise_linux_7:python-syspurpose", "red_hat_enterprise_linux_7:rhsm-gtk", "red_hat_enterprise_linux_7:subscription-manager", "red_hat_enterprise_linux_7:subscription-manager-cockpit", "red_hat_enterprise_linux_7:subscription-manager-gui", "red_hat_enterprise_linux_7:subscription-manager-initial-setup-addon", "red_hat_enterprise_linux_7:subscription-manager-migration", "red_hat_enterprise_linux_7:subscription-manager-plugin-container", "red_hat_enterprise_linux_7:subscription-manager-plugin-ostree", "red_hat_enterprise_linux_7:subscription-manager-rhsm", "red_hat_enterprise_linux_7:subscription-manager-rhsm-certificates", "red_hat_enterprise_linux_7:subscription-manager.src", "red_hat_enterprise_linux_8:grafana", "red_hat_enterprise_linux_8:grafana-azure-monitor", "red_hat_enterprise_linux_8:grafana-cloudwatch", "red_hat_enterprise_linux_8:grafana-elasticsearch", "red_hat_enterprise_linux_8:grafana-graphite", "red_hat_enterprise_linux_8:grafana-influxdb", "red_hat_enterprise_linux_8:grafana-loki", "red_hat_enterprise_linux_8:grafana-mssql", "red_hat_enterprise_linux_8:grafana-mysql", "red_hat_enterprise_linux_8:grafana-opentsdb", "red_hat_enterprise_linux_8:grafana-pcp", "red_hat_enterprise_linux_8:grafana-pcp.src", "red_hat_enterprise_linux_8:grafana-postgres", "red_hat_enterprise_linux_8:grafana-prometheus", "red_hat_enterprise_linux_8:grafana-selinux", "red_hat_enterprise_linux_8:grafana-stackdriver", "red_hat_enterprise_linux_8:grafana.src", "red_hat_fuse_7:image-size", "red_hat_jboss_enterprise_application_platform_7:image-size", "red_hat_jboss_enterprise_application_platform_8:image-size", "red_hat_jboss_enterprise_application_platform_expansion_pack:image-size", "red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9", "red_hat_openshift_dev_spaces:devspaces/code-rhel9", "red_hat_satellite_6:satellite/iop-vulnerability-frontend-rhel9" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2025-71319" }, { "category": "external", "summary": "RHBZ#2487296", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487296" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2025-71319", "url": "https://www.cve.org/CVERecord?id=CVE-2025-71319" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-71319", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-71319" }, { "category": "external", "summary": "https://github.com/image-size/image-size/security/advisories/GHSA-m5qc-5hw7-8vg7", "url": "https://github.com/image-size/image-size/security/advisories/GHSA-m5qc-5hw7-8vg7" }, { "category": "external", "summary": "https://www.vulncheck.com/advisories/image-size-denial-of-service-via-infinite-loop-in-findbox-function", "url": "https://www.vulncheck.com/advisories/image-size-denial-of-service-via-infinite-loop-in-findbox-function" } ], "release_date": "2026-06-09T19:57:16.125000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2026-06-29T22:05:31+00:00", "details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.", "product_ids": [ "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:3152cbb7f8ab85315ebb95b9f5cd5793c40859ee4487587f16a525ac5d408a44_arm64", "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:e9614239f2c391d00779cf6c7b998400de90bafbda14aa034e09020723c25a70_amd64" ], "url": "https://access.redhat.com/errata/RHSA-2026:33313" }, { "category": "vendor_fix", "date": "2026-07-09T11:43:10+00:00", "details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization's software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index", "product_ids": [ "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64" ], "url": "https://access.redhat.com/errata/RHSA-2026:37272" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.", "product_ids": [ "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:3152cbb7f8ab85315ebb95b9f5cd5793c40859ee4487587f16a525ac5d408a44_arm64", "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:e9614239f2c391d00779cf6c7b998400de90bafbda14aa034e09020723c25a70_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64", "gatekeeper_3:gatekeeper/gatekeeper-rhel9", "red_hat_enterprise_linux_8:dnf-plugin-subscription-manager", "red_hat_enterprise_linux_8:python3-cloud-what", "red_hat_enterprise_linux_8:python3-subscription-manager-rhsm", "red_hat_enterprise_linux_8:python3-syspurpose", "red_hat_enterprise_linux_8:rhsm-gtk", "red_hat_enterprise_linux_8:rhsm-icons", "red_hat_enterprise_linux_8:subscription-manager", "red_hat_enterprise_linux_8:subscription-manager-cockpit", "red_hat_enterprise_linux_8:subscription-manager-initial-setup-addon", "red_hat_enterprise_linux_8:subscription-manager-migration", "red_hat_enterprise_linux_8:subscription-manager-plugin-ostree", "red_hat_enterprise_linux_8:subscription-manager-rhsm-certificates", "red_hat_enterprise_linux_8:subscription-manager.src" ] }, { "category": "none_available", "details": "Affected", "product_ids": [ "gatekeeper_3:gatekeeper/gatekeeper-rhel9", "red_hat_enterprise_linux_8:dnf-plugin-subscription-manager", "red_hat_enterprise_linux_8:python3-cloud-what", "red_hat_enterprise_linux_8:python3-subscription-manager-rhsm", "red_hat_enterprise_linux_8:python3-syspurpose", "red_hat_enterprise_linux_8:rhsm-gtk", "red_hat_enterprise_linux_8:rhsm-icons", "red_hat_enterprise_linux_8:subscription-manager", "red_hat_enterprise_linux_8:subscription-manager-cockpit", "red_hat_enterprise_linux_8:subscription-manager-initial-setup-addon", "red_hat_enterprise_linux_8:subscription-manager-migration", "red_hat_enterprise_linux_8:subscription-manager-plugin-ostree", "red_hat_enterprise_linux_8:subscription-manager-rhsm-certificates", "red_hat_enterprise_linux_8:subscription-manager.src" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6c26d60b5d8eb5a823be4d6e83f2ebb32f5d15216338b85eb4b08aca4dc9316d_arm64", "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:7f4f6ce62705fe518e3513957b4205f106992cd42d1b07975d11aff2dc6ced66_amd64", "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:3152cbb7f8ab85315ebb95b9f5cd5793c40859ee4487587f16a525ac5d408a44_arm64", "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:e9614239f2c391d00779cf6c7b998400de90bafbda14aa034e09020723c25a70_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64", "gatekeeper_3:gatekeeper/gatekeeper-rhel9", "red_hat_build_of_podman_desktop:rh-podman-desktop.git", "red_hat_enterprise_linux_7:python-syspurpose", "red_hat_enterprise_linux_7:rhsm-gtk", "red_hat_enterprise_linux_7:subscription-manager", "red_hat_enterprise_linux_7:subscription-manager-cockpit", "red_hat_enterprise_linux_7:subscription-manager-gui", "red_hat_enterprise_linux_7:subscription-manager-initial-setup-addon", "red_hat_enterprise_linux_7:subscription-manager-migration", "red_hat_enterprise_linux_7:subscription-manager-plugin-container", "red_hat_enterprise_linux_7:subscription-manager-plugin-ostree", "red_hat_enterprise_linux_7:subscription-manager-rhsm", "red_hat_enterprise_linux_7:subscription-manager-rhsm-certificates", "red_hat_enterprise_linux_7:subscription-manager.src", "red_hat_enterprise_linux_8:dnf-plugin-subscription-manager", "red_hat_enterprise_linux_8:grafana", "red_hat_enterprise_linux_8:grafana-azure-monitor", "red_hat_enterprise_linux_8:grafana-cloudwatch", "red_hat_enterprise_linux_8:grafana-elasticsearch", "red_hat_enterprise_linux_8:grafana-graphite", "red_hat_enterprise_linux_8:grafana-influxdb", "red_hat_enterprise_linux_8:grafana-loki", "red_hat_enterprise_linux_8:grafana-mssql", "red_hat_enterprise_linux_8:grafana-mysql", "red_hat_enterprise_linux_8:grafana-opentsdb", "red_hat_enterprise_linux_8:grafana-pcp", "red_hat_enterprise_linux_8:grafana-pcp.src", "red_hat_enterprise_linux_8:grafana-postgres", "red_hat_enterprise_linux_8:grafana-prometheus", "red_hat_enterprise_linux_8:grafana-selinux", "red_hat_enterprise_linux_8:grafana-stackdriver", "red_hat_enterprise_linux_8:grafana.src", "red_hat_enterprise_linux_8:python3-cloud-what", "red_hat_enterprise_linux_8:python3-subscription-manager-rhsm", "red_hat_enterprise_linux_8:python3-syspurpose", "red_hat_enterprise_linux_8:rhsm-gtk", "red_hat_enterprise_linux_8:rhsm-icons", "red_hat_enterprise_linux_8:subscription-manager", "red_hat_enterprise_linux_8:subscription-manager-cockpit", "red_hat_enterprise_linux_8:subscription-manager-initial-setup-addon", "red_hat_enterprise_linux_8:subscription-manager-migration", "red_hat_enterprise_linux_8:subscription-manager-plugin-ostree", "red_hat_enterprise_linux_8:subscription-manager-rhsm-certificates", "red_hat_enterprise_linux_8:subscription-manager.src", "red_hat_fuse_7:image-size", "red_hat_jboss_enterprise_application_platform_7:image-size", "red_hat_jboss_enterprise_application_platform_8:image-size", "red_hat_jboss_enterprise_application_platform_expansion_pack:image-size", "red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9", "red_hat_openshift_dev_spaces:devspaces/code-rhel9", "red_hat_satellite_6:satellite/iop-vulnerability-frontend-rhel9" ] } ], "threats": [ { "category": "impact", "details": "Important", "product_ids": [ "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6c26d60b5d8eb5a823be4d6e83f2ebb32f5d15216338b85eb4b08aca4dc9316d_arm64", "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:7f4f6ce62705fe518e3513957b4205f106992cd42d1b07975d11aff2dc6ced66_amd64", "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:3152cbb7f8ab85315ebb95b9f5cd5793c40859ee4487587f16a525ac5d408a44_arm64", "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:e9614239f2c391d00779cf6c7b998400de90bafbda14aa034e09020723c25a70_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64", "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64", "gatekeeper_3:gatekeeper/gatekeeper-rhel9", "red_hat_build_of_podman_desktop:rh-podman-desktop.git", "red_hat_enterprise_linux_7:python-syspurpose", "red_hat_enterprise_linux_7:rhsm-gtk", "red_hat_enterprise_linux_7:subscription-manager", "red_hat_enterprise_linux_7:subscription-manager-cockpit", "red_hat_enterprise_linux_7:subscription-manager-gui", "red_hat_enterprise_linux_7:subscription-manager-initial-setup-addon", "red_hat_enterprise_linux_7:subscription-manager-migration", "red_hat_enterprise_linux_7:subscription-manager-plugin-container", "red_hat_enterprise_linux_7:subscription-manager-plugin-ostree", "red_hat_enterprise_linux_7:subscription-manager-rhsm", "red_hat_enterprise_linux_7:subscription-manager-rhsm-certificates", "red_hat_enterprise_linux_7:subscription-manager.src", "red_hat_enterprise_linux_8:dnf-plugin-subscription-manager", "red_hat_enterprise_linux_8:grafana", "red_hat_enterprise_linux_8:grafana-azure-monitor", "red_hat_enterprise_linux_8:grafana-cloudwatch", "red_hat_enterprise_linux_8:grafana-elasticsearch", "red_hat_enterprise_linux_8:grafana-graphite", "red_hat_enterprise_linux_8:grafana-influxdb", "red_hat_enterprise_linux_8:grafana-loki", "red_hat_enterprise_linux_8:grafana-mssql", "red_hat_enterprise_linux_8:grafana-mysql", "red_hat_enterprise_linux_8:grafana-opentsdb", "red_hat_enterprise_linux_8:grafana-pcp", "red_hat_enterprise_linux_8:grafana-pcp.src", "red_hat_enterprise_linux_8:grafana-postgres", "red_hat_enterprise_linux_8:grafana-prometheus", "red_hat_enterprise_linux_8:grafana-selinux", "red_hat_enterprise_linux_8:grafana-stackdriver", "red_hat_enterprise_linux_8:grafana.src", "red_hat_enterprise_linux_8:python3-cloud-what", "red_hat_enterprise_linux_8:python3-subscription-manager-rhsm", "red_hat_enterprise_linux_8:python3-syspurpose", "red_hat_enterprise_linux_8:rhsm-gtk", "red_hat_enterprise_linux_8:rhsm-icons", "red_hat_enterprise_linux_8:subscription-manager", "red_hat_enterprise_linux_8:subscription-manager-cockpit", "red_hat_enterprise_linux_8:subscription-manager-initial-setup-addon", "red_hat_enterprise_linux_8:subscription-manager-migration", "red_hat_enterprise_linux_8:subscription-manager-plugin-ostree", "red_hat_enterprise_linux_8:subscription-manager-rhsm-certificates", "red_hat_enterprise_linux_8:subscription-manager.src", "red_hat_fuse_7:image-size", "red_hat_jboss_enterprise_application_platform_7:image-size", "red_hat_jboss_enterprise_application_platform_8:image-size", "red_hat_jboss_enterprise_application_platform_expansion_pack:image-size", "red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9", "red_hat_openshift_dev_spaces:devspaces/code-rhel9", "red_hat_satellite_6:satellite/iop-vulnerability-frontend-rhel9" ] } ], "title": "image-size: image-size: Denial of Service due to infinite loop when processing specially crafted images." } ] }