Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Gnutls: gnutls: security bypass due to incorrect name constraint handling

CVSS 3.1 7.4 HIGHCheck source for fixed versionsKEV status unknown

Historical advisory recorded 5 Nov 2026 21:36:21 UTC. Read the latest advisory.

cve-program · CVE-2026-42011

Published

A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities (CAs) only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during certificate validation. This bypass could lead to the acceptance of invalid certificates, potentially enabling spoofing or man-in-the-middle attacks against affected systems.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-42011

Published

gnutls

https://gitlab.com/gnutls/gnutls

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0"
                        }
                    ],
                    "packageName": "gnutls",
                    "collectionURL": "https://gitlab.com/gnutls/gnutls"
                }

gnutls

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 10",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "gnutls",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:3.8.10-4.el10_2",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/o:redhat:enterprise_linux:10.2"
                    ]
                }

gnutls

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "gnutls",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:3.8.9-9.el10_0.19",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/o:redhat:enterprise_linux_eus:10.0"
                    ]
                }

gnutls

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "gnutls",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:3.3.29-9.el7_9.2",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/o:redhat:rhel_els:7"
                    ]
                }

gnutls

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "gnutls",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:3.6.16-8.el8_10.6",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:enterprise_linux:8::appstream",
                        "cpe:/o:redhat:enterprise_linux:8::baseos"
                    ]
                }

gnutls

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "gnutls",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:3.6.16-8.el8_10.6",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:enterprise_linux:8::appstream",
                        "cpe:/o:redhat:enterprise_linux:8::baseos"
                    ]
                }

gnutls

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "gnutls",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:3.6.14-10.el8_4.1",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhel_aus:8.4::appstream",
                        "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream",
                        "cpe:/o:redhat:rhel_aus:8.4::baseos",
                        "cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"
                    ]
                }

libtasn1

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "libtasn1",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:4.13-3.el8_4.1",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhel_aus:8.4::appstream",
                        "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream",
                        "cpe:/o:redhat:rhel_aus:8.4::baseos",
                        "cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"
                    ]
                }

gnutls

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "gnutls",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:3.6.14-10.el8_4.1",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhel_aus:8.4::appstream",
                        "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream",
                        "cpe:/o:redhat:rhel_aus:8.4::baseos",
                        "cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"
                    ]
                }

libtasn1

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "libtasn1",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:4.13-3.el8_4.1",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhel_aus:8.4::appstream",
                        "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream",
                        "cpe:/o:redhat:rhel_aus:8.4::baseos",
                        "cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"
                    ]
                }

gnutls

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "gnutls",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:3.6.16-5.el8_6.5",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhel_aus:8.6::appstream",
                        "cpe:/a:redhat:rhel_eus_long_life:8.6::appstream",
                        "cpe:/o:redhat:rhel_aus:8.6::baseos",
                        "cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"
                    ]
                }

libtasn1

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "libtasn1",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:4.13-3.el8_6.2",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhel_aus:8.6::appstream",
                        "cpe:/a:redhat:rhel_eus_long_life:8.6::appstream",
                        "cpe:/o:redhat:rhel_aus:8.6::baseos",
                        "cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"
                    ]
                }

gnutls

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "gnutls",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:3.6.16-5.el8_6.5",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhel_aus:8.6::appstream",
                        "cpe:/a:redhat:rhel_eus_long_life:8.6::appstream",
                        "cpe:/o:redhat:rhel_aus:8.6::baseos",
                        "cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"
                    ]
                }

libtasn1

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "libtasn1",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:4.13-3.el8_6.2",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhel_aus:8.6::appstream",
                        "cpe:/a:redhat:rhel_eus_long_life:8.6::appstream",
                        "cpe:/o:redhat:rhel_aus:8.6::baseos",
                        "cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"
                    ]
                }

gnutls

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "gnutls",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:3.6.16-7.el8_8.4",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhel_e4s:8.8::appstream",
                        "cpe:/a:redhat:rhel_tus:8.8::appstream",
                        "cpe:/o:redhat:rhel_e4s:8.8::baseos",
                        "cpe:/o:redhat:rhel_tus:8.8::baseos"
                    ]
                }

libtasn1

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "libtasn1",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:4.13-4.el8_8.1",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhel_e4s:8.8::appstream",
                        "cpe:/a:redhat:rhel_tus:8.8::appstream",
                        "cpe:/o:redhat:rhel_e4s:8.8::baseos",
                        "cpe:/o:redhat:rhel_tus:8.8::baseos"
                    ]
                }

gnutls

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "gnutls",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:3.6.16-7.el8_8.4",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhel_e4s:8.8::appstream",
                        "cpe:/a:redhat:rhel_tus:8.8::appstream",
                        "cpe:/o:redhat:rhel_e4s:8.8::baseos",
                        "cpe:/o:redhat:rhel_tus:8.8::baseos"
                    ]
                }

libtasn1

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "libtasn1",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:4.13-4.el8_8.1",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhel_e4s:8.8::appstream",
                        "cpe:/a:redhat:rhel_tus:8.8::appstream",
                        "cpe:/o:redhat:rhel_e4s:8.8::baseos",
                        "cpe:/o:redhat:rhel_tus:8.8::baseos"
                    ]
                }

gnutls

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 9",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "gnutls",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:3.8.10-4.el9_8",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:enterprise_linux:9::appstream",
                        "cpe:/o:redhat:enterprise_linux:9::baseos"
                    ]
                }

gnutls

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 9",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "gnutls",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:3.8.10-4.el9_8",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:enterprise_linux:9::appstream",
                        "cpe:/o:redhat:enterprise_linux:9::baseos"
                    ]
                }

gnutls

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "gnutls",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:3.7.6-21.el9_2.7",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhel_e4s:9.2::appstream",
                        "cpe:/o:redhat:rhel_e4s:9.2::baseos"
                    ]
                }

gnutls

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "gnutls",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:3.8.3-4.el9_4.6",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhel_e4s:9.4::appstream",
                        "cpe:/o:redhat:rhel_e4s:9.4::baseos"
                    ]
                }

gnutls

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "gnutls",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:3.8.3-6.el9_6.4",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhel_eus:9.6::appstream",
                        "cpe:/o:redhat:rhel_eus:9.6::baseos"
                    ]
                }

openshift/ose-rhel-coreos-8

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4.12",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "openshift/ose-rhel-coreos-8",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "412.86.202608241157-0",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift:4.12::el8"
                    ]
                }

openshift/ose-rhel-coreos-9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4.16",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "openshift/ose-rhel-coreos-9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "416.94.202608150307-0",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift:4.16::el9"
                    ]
                }

openshift/ose-rhel-coreos-9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4.17",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "openshift/ose-rhel-coreos-9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "417.94.202608250221-0",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift:4.17::el9"
                    ]
                }

openshift/ose-rhel-coreos-9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4.18",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "openshift/ose-rhel-coreos-9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "418.94.202608142238-0",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift:4.18::el9"
                    ]
                }

openshift/ose-rhel-coreos-9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4.19",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "openshift/ose-rhel-coreos-9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "4.19.9.6.202607151909-0",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift:4.19::el9"
                    ]
                }

openshift/ose-rhel-coreos-9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4.20",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "openshift/ose-rhel-coreos-9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "4.20.9.6.202610242033-0",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift:4.20::el9"
                    ]
                }

openshift/ose-rhel-coreos-9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4.21",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "openshift/ose-rhel-coreos-9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "4.21.9.6.202610241345-0",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift:4.21::el9"
                    ]
                }

openshift/ose-rhel-coreos-9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4.22",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "openshift/ose-rhel-coreos-9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "4.22.9.8.202610241758-0",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift:4.22::el9"
                    ]
                }

cert-manager/jetstack-cert-manager-acmesolver-rhel9

https://catalog.redhat.com/software/containers/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Cert Manager support for Red Hat OpenShift release 1.17",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "cert-manager/jetstack-cert-manager-acmesolver-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1791371080",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:cert_manager:1.17::el9"
                    ]
                }

cert-manager/jetstack-cert-manager-rhel9

https://catalog.redhat.com/software/containers/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Cert Manager support for Red Hat OpenShift release 1.17",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "cert-manager/jetstack-cert-manager-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1791371069",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:cert_manager:1.17::el9"
                    ]
                }

cert-manager/cert-manager-operator-rhel9

https://catalog.redhat.com/software/containers/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Cert Manager support for Red Hat OpenShift release 1.17",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "cert-manager/cert-manager-operator-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1791788287",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:cert_manager:1.17::el9"
                    ]
                }

cert-manager/cert-manager-operator-bundle

https://catalog.redhat.com/software/containers/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Cert Manager support for Red Hat OpenShift release 1.17",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "cert-manager/cert-manager-operator-bundle",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1791970484",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:cert_manager:1.17::el9"
                    ]
                }

cert-manager/jetstack-cert-manager-acmesolver-rhel9

https://catalog.redhat.com/software/containers/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Cert Manager support for Red Hat OpenShift release 1.18",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "cert-manager/jetstack-cert-manager-acmesolver-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1791459707",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:cert_manager:1.18::el9"
                    ]
                }

cert-manager/jetstack-cert-manager-rhel9

https://catalog.redhat.com/software/containers/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Cert Manager support for Red Hat OpenShift release 1.18",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "cert-manager/jetstack-cert-manager-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1791459711",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:cert_manager:1.18::el9"
                    ]
                }

cert-manager/cert-manager-istio-csr-rhel9

https://catalog.redhat.com/software/containers/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Cert Manager support for Red Hat OpenShift release 1.18",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "cert-manager/cert-manager-istio-csr-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1791459759",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:cert_manager:1.18::el9"
                    ]
                }

cert-manager/cert-manager-operator-rhel9

https://catalog.redhat.com/software/containers/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Cert Manager support for Red Hat OpenShift release 1.18",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "cert-manager/cert-manager-operator-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1789029076",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:cert_manager:1.18::el9"
                    ]
                }

cert-manager/cert-manager-operator-bundle

https://catalog.redhat.com/software/containers/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Cert Manager support for Red Hat OpenShift release 1.18",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "cert-manager/cert-manager-operator-bundle",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1791966259",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:cert_manager:1.18::el9"
                    ]
                }

cert-manager/cert-manager-trust-manager-rhel9

https://catalog.redhat.com/software/containers/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Cert Manager support for Red Hat OpenShift release 1.20",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "cert-manager/cert-manager-trust-manager-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1790598593",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:cert_manager:1.20::el9"
                    ]
                }

discovery/discovery-server-rhel9

https://catalog.redhat.com/software/containers/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Discovery 2",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "discovery/discovery-server-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1782159791",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:discovery:2::el9"
                    ]
                }

discovery/discovery-ui-rhel9

https://catalog.redhat.com/software/containers/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Discovery 2",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "discovery/discovery-ui-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1782166952",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:discovery:2::el9"
                    ]
                }

gnutls-main

https://catalog.redhat.com/software/containers/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Hardened Images",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "gnutls-main",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "3.8.13-1.hum1",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:hummingbird:1"
                    ]
                }

rhai/base-image-neuron-rhel9

https://catalog.redhat.com/software/containers/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift AI 3.4",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "rhai/base-image-neuron-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1790703542",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift_ai:3.4::el9"
                    ]
                }

rhui5/cds-rhel9

https://catalog.redhat.com/software/containers/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Update Infrastructure 5",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "rhui5/cds-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1781525684",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhui:5::el9"
                    ]
                }

rhui5/haproxy-rhel9

https://catalog.redhat.com/software/containers/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Update Infrastructure 5",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "rhui5/haproxy-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1781525671",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhui:5::el9"
                    ]
                }

rhui5/installer-rhel9

https://catalog.redhat.com/software/containers/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Update Infrastructure 5",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "rhui5/installer-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1781525693",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhui:5::el9"
                    ]
                }

rhui5/rhua-rhel9

https://catalog.redhat.com/software/containers/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Update Infrastructure 5",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "rhui5/rhua-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1781525739",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhui:5::el9"
                    ]
                }

rhui5/cds-kubernetes-tp-rhel9

https://catalog.redhat.com/software/containers/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Update Infrastructure 5",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "rhui5/cds-kubernetes-tp-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1787241211",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhui:5::el9"
                    ]
                }

rhui5/installer-tp-rhel9

https://catalog.redhat.com/software/containers/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Update Infrastructure 5",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "rhui5/installer-tp-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1787135742",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhui:5::el9"
                    ]
                }

rhui5/rhua-tp-rhel9

https://catalog.redhat.com/software/containers/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Update Infrastructure 5",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "rhui5/rhua-tp-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1787241260",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhui:5::el9"
                    ]
                }

gnutls

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 6",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "gnutls",
                    "defaultStatus": "unaffected",
                    "cpes": [
                        "cpe:/o:redhat:rhel_els:6"
                    ]
                }

openshift4/ose-hypershift-rhel9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "openshift4/ose-hypershift-rhel9",
                    "defaultStatus": "unaffected",
                    "cpes": [
                        "cpe:/a:redhat:openshift:4"
                    ]
                }

openshift/ose-rhel-coreos-9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 5",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "openshift/ose-rhel-coreos-9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:openshift:5"
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 12 Nov 19:39 UTC · 274 of 275 readable · 272 fully read · documentation 469/469 current