cve-2026-6276
LOW CVSS 3.7 csaf_redhat
Description
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Timeline
- Published
- 2026-04-29 00:00 UTC
- Last Modified
- 2026-09-01
CVSS Details
CVSS details not available.
Affected Products
No product information available.
Weaknesses (CWE)
References
No references available.
Linked Vulnerabilities
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Low"
},
"category": "csaf_vex",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright © Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json"
}
],
"title": "curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headers",
"tracking": {
"current_release_date": "2026-09-01T12:07:26+00:00",
"generator": {
"date": "2026-09-01T12:07:26+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "CVE-2026-6276",
"initial_release_date": "2026-04-29T00:00:00+00:00",
"revision_history": [
{
"date": "2026-04-29T00:00:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-01T10:58:26+00:00",
"number": "2",
"summary": "Current version"
},
{
"date": "2026-09-01T12:07:26+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Confidential Compute Attestation",
"product": {
"name": "Confidential Compute Attestation",
"product_id": "confidential_compute_attestation",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:confidential_compute_attestation:1"
}
}
}
],
"category": "product_family",
"name": "Confidential Compute Attestation"
},
{
"branches": [
{
"category": "product_name",
"name": "Logging Subsystem for Red Hat OpenShift",
"product": {
"name": "Logging Subsystem for Red Hat OpenShift",
"product_id": "logging_subsystem_for_red_hat_openshift",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:logging:5"
}
}
}
],
"category": "product_family",
"name": "Logging Subsystem for Red Hat OpenShift"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux 10",
"product": {
"name": "Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux 10"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux 6",
"product": {
"name": "Red Hat Enterprise Linux 6",
"product_id": "red_hat_enterprise_linux_6",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux 6"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux 7",
"product": {
"name": "Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux 7"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux 8",
"product": {
"name": "Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux 8"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux 9",
"product": {
"name": "Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux 9"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"product": {
"name": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"product_id": "red_hat_enterprise_linux_ai_(rhel_ai)_3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux_ai:3"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux AI (RHEL AI) 3"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Hardened Images",
"product": {
"name": "Red Hat Hardened Images",
"product_id": "red_hat_hardened_images",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:hummingbird:1"
}
}
},
{
"category": "product_name",
"name": "Red Hat Hardened Images",
"product": {
"name": "Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:hummingbird:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Hardened Images"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Core Services",
"product": {
"name": "Red Hat JBoss Core Services",
"product_id": "red_hat_jboss_core_services",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_core_services:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Core Services"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Container Platform 4",
"product": {
"name": "Red Hat OpenShift Container Platform 4",
"product_id": "red_hat_openshift_container_platform_4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:4"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Container Platform 4"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Dev Spaces",
"product": {
"name": "Red Hat OpenShift Dev Spaces",
"product_id": "red_hat_openshift_dev_spaces",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_devspaces:3"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Dev Spaces"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Trusted Profile Analyzer",
"product": {
"name": "Red Hat Trusted Profile Analyzer",
"product_id": "red_hat_trusted_profile_analyzer",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:trusted_profile_analyzer:2"
}
}
}
],
"category": "product_family",
"name": "Red Hat Trusted Profile Analyzer"
},
{
"category": "product_version",
"name": "build-of-trustee/trustee-rhel9",
"product": {
"name": "build-of-trustee/trustee-rhel9",
"product_id": "build-of-trustee/trustee-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/trustee-rhel9?repository_url=registry.redhat.io/build-of-trustee/trustee-rhel9"
}
}
},
{
"category": "product_version",
"name": "confidential-compute-attestation-tech-preview/trustee-rhel9",
"product": {
"name": "confidential-compute-attestation-tech-preview/trustee-rhel9",
"product_id": "confidential-compute-attestation-tech-preview/trustee-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/trustee-rhel9?repository_url=registry.redhat.io/confidential-compute-attestation-tech-preview/trustee-rhel9"
}
}
},
{
"category": "product_version",
"name": "openshift-sandboxed-containers/osc-operator-bundle",
"product": {
"name": "openshift-sandboxed-containers/osc-operator-bundle",
"product_id": "openshift-sandboxed-containers/osc-operator-bundle",
"product_identification_helper": {
"purl": "pkg:oci/osc-operator-bundle?repository_url=registry.redhat.io/openshift-sandboxed-containers/osc-operator-bundle"
}
}
},
{
"category": "product_version",
"name": "openshift-sandboxed-containers/osc-podvm-builder-rhel9",
"product": {
"name": "openshift-sandboxed-containers/osc-podvm-builder-rhel9",
"product_id": "openshift-sandboxed-containers/osc-podvm-builder-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/osc-podvm-builder-rhel9?repository_url=registry.redhat.io/openshift-sandboxed-containers/osc-podvm-builder-rhel9"
}
}
},
{
"category": "product_version",
"name": "openshift-sandboxed-containers/osc-podvm-payload-rhel9",
"product": {
"name": "openshift-sandboxed-containers/osc-podvm-payload-rhel9",
"product_id": "openshift-sandboxed-containers/osc-podvm-payload-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/osc-podvm-payload-rhel9?repository_url=registry.redhat.io/openshift-sandboxed-containers/osc-podvm-payload-rhel9"
}
}
},
{
"category": "product_version",
"name": "openshift-sandboxed-containers/osc-rhel9-operator",
"product": {
"name": "openshift-sandboxed-containers/osc-rhel9-operator",
"product_id": "openshift-sandboxed-containers/osc-rhel9-operator",
"product_identification_helper": {
"purl": "pkg:oci/osc-rhel9-operator?repository_url=registry.redhat.io/openshift-sandboxed-containers/osc-rhel9-operator"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/cluster-logging-operator-bundle",
"product": {
"name": "openshift-logging/cluster-logging-operator-bundle",
"product_id": "openshift-logging/cluster-logging-operator-bundle",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-operator-bundle?repository_url=registry.redhat.io/openshift-logging/cluster-logging-operator-bundle"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/cluster-logging-rhel9-operator",
"product": {
"name": "openshift-logging/cluster-logging-rhel9-operator",
"product_id": "openshift-logging/cluster-logging-rhel9-operator",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator?repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/eventrouter-rhel9",
"product": {
"name": "openshift-logging/eventrouter-rhel9",
"product_id": "openshift-logging/eventrouter-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9?repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/fluentd-rhel9",
"product": {
"name": "openshift-logging/fluentd-rhel9",
"product_id": "openshift-logging/fluentd-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/fluentd-rhel9?repository_url=registry.redhat.io/openshift-logging/fluentd-rhel9"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/log-file-metric-exporter-rhel9",
"product": {
"name": "openshift-logging/log-file-metric-exporter-rhel9",
"product_id": "openshift-logging/log-file-metric-exporter-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9?repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/logging-view-plugin-rhel9",
"product": {
"name": "openshift-logging/logging-view-plugin-rhel9",
"product_id": "openshift-logging/logging-view-plugin-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/logging-view-plugin-rhel9?repository_url=registry.redhat.io/openshift-logging/logging-view-plugin-rhel9"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/vector-rhel9",
"product": {
"name": "openshift-logging/vector-rhel9",
"product_id": "openshift-logging/vector-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9?repository_url=registry.redhat.io/openshift-logging/vector-rhel9"
}
}
},
{
"category": "product_version",
"name": "libcurl",
"product": {
"name": "libcurl",
"product_id": "libcurl",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl"
}
}
},
{
"category": "product_version",
"name": "libcurl-minimal",
"product": {
"name": "libcurl-minimal",
"product_id": "libcurl-minimal",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-minimal"
}
}
},
{
"category": "product_version",
"name": "libcurl-devel",
"product": {
"name": "libcurl-devel",
"product_id": "libcurl-devel",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-devel"
}
}
},
{
"category": "product_version",
"name": "curl",
"product": {
"name": "curl",
"product_id": "curl",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl"
}
}
},
{
"category": "product_version",
"name": "curl.src",
"product": {
"name": "curl.src",
"product_id": "curl.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl?arch=src"
}
}
},
{
"category": "product_version",
"name": "rust-lldb",
"product": {
"name": "rust-lldb",
"product_id": "rust-lldb",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-lldb"
}
}
},
{
"category": "product_version",
"name": "rust-doc",
"product": {
"name": "rust-doc",
"product_id": "rust-doc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-doc"
}
}
},
{
"category": "product_version",
"name": "rust-analyzer",
"product": {
"name": "rust-analyzer",
"product_id": "rust-analyzer",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-analyzer"
}
}
},
{
"category": "product_version",
"name": "rustfmt",
"product": {
"name": "rustfmt",
"product_id": "rustfmt",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rustfmt"
}
}
},
{
"category": "product_version",
"name": "rust-std-static",
"product": {
"name": "rust-std-static",
"product_id": "rust-std-static",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-std-static"
}
}
},
{
"category": "product_version",
"name": "cargo",
"product": {
"name": "cargo",
"product_id": "cargo",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cargo"
}
}
},
{
"category": "product_version",
"name": "rust.src",
"product": {
"name": "rust.src",
"product_id": "rust.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust?arch=src"
}
}
},
{
"category": "product_version",
"name": "rust-std-static-aarch64-unknown-none-softfloat",
"product": {
"name": "rust-std-static-aarch64-unknown-none-softfloat",
"product_id": "rust-std-static-aarch64-unknown-none-softfloat",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-std-static-aarch64-unknown-none-softfloat"
}
}
},
{
"category": "product_version",
"name": "rust-debugger-common",
"product": {
"name": "rust-debugger-common",
"product_id": "rust-debugger-common",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-debugger-common"
}
}
},
{
"category": "product_version",
"name": "rust-std-static-x86_64-unknown-none",
"product": {
"name": "rust-std-static-x86_64-unknown-none",
"product_id": "rust-std-static-x86_64-unknown-none",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-std-static-x86_64-unknown-none"
}
}
},
{
"category": "product_version",
"name": "rust-std-static-wasm32-unknown-unknown",
"product": {
"name": "rust-std-static-wasm32-unknown-unknown",
"product_id": "rust-std-static-wasm32-unknown-unknown",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-std-static-wasm32-unknown-unknown"
}
}
},
{
"category": "product_version",
"name": "rust-src",
"product": {
"name": "rust-src",
"product_id": "rust-src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-src"
}
}
},
{
"category": "product_version",
"name": "rust-toolset-srpm-macros",
"product": {
"name": "rust-toolset-srpm-macros",
"product_id": "rust-toolset-srpm-macros",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-toolset-srpm-macros"
}
}
},
{
"category": "product_version",
"name": "clippy",
"product": {
"name": "clippy",
"product_id": "clippy",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/clippy"
}
}
},
{
"category": "product_version",
"name": "rust-toolset",
"product": {
"name": "rust-toolset",
"product_id": "rust-toolset",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-toolset"
}
}
},
{
"category": "product_version",
"name": "rust-std-static-wasm32-wasip1",
"product": {
"name": "rust-std-static-wasm32-wasip1",
"product_id": "rust-std-static-wasm32-wasip1",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-std-static-wasm32-wasip1"
}
}
},
{
"category": "product_version",
"name": "rust-gdb",
"product": {
"name": "rust-gdb",
"product_id": "rust-gdb",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-gdb"
}
}
},
{
"category": "product_version",
"name": "s390utils-zdsfs",
"product": {
"name": "s390utils-zdsfs",
"product_id": "s390utils-zdsfs",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-zdsfs"
}
}
},
{
"category": "product_version",
"name": "s390utils-cpuplugd",
"product": {
"name": "s390utils-cpuplugd",
"product_id": "s390utils-cpuplugd",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-cpuplugd"
}
}
},
{
"category": "product_version",
"name": "s390utils-chreipl-fcp-mpath",
"product": {
"name": "s390utils-chreipl-fcp-mpath",
"product_id": "s390utils-chreipl-fcp-mpath",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-chreipl-fcp-mpath"
}
}
},
{
"category": "product_version",
"name": "s390utils.src",
"product": {
"name": "s390utils.src",
"product_id": "s390utils.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils?arch=src"
}
}
},
{
"category": "product_version",
"name": "s390utils-cmsfs-fuse",
"product": {
"name": "s390utils-cmsfs-fuse",
"product_id": "s390utils-cmsfs-fuse",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-cmsfs-fuse"
}
}
},
{
"category": "product_version",
"name": "s390utils-osasnmpd",
"product": {
"name": "s390utils-osasnmpd",
"product_id": "s390utils-osasnmpd",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-osasnmpd"
}
}
},
{
"category": "product_version",
"name": "s390utils-devel",
"product": {
"name": "s390utils-devel",
"product_id": "s390utils-devel",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-devel"
}
}
},
{
"category": "product_version",
"name": "s390utils-se-data",
"product": {
"name": "s390utils-se-data",
"product_id": "s390utils-se-data",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-se-data"
}
}
},
{
"category": "product_version",
"name": "s390utils-cpacfstatsd",
"product": {
"name": "s390utils-cpacfstatsd",
"product_id": "s390utils-cpacfstatsd",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-cpacfstatsd"
}
}
},
{
"category": "product_version",
"name": "s390utils-mon_statd",
"product": {
"name": "s390utils-mon_statd",
"product_id": "s390utils-mon_statd",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-mon_statd"
}
}
},
{
"category": "product_version",
"name": "s390utils-ziomon",
"product": {
"name": "s390utils-ziomon",
"product_id": "s390utils-ziomon",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-ziomon"
}
}
},
{
"category": "product_version",
"name": "s390utils-hmcdrvfs",
"product": {
"name": "s390utils-hmcdrvfs",
"product_id": "s390utils-hmcdrvfs",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-hmcdrvfs"
}
}
},
{
"category": "product_version",
"name": "s390utils-core",
"product": {
"name": "s390utils-core",
"product_id": "s390utils-core",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-core"
}
}
},
{
"category": "product_version",
"name": "s390utils-iucvterm",
"product": {
"name": "s390utils-iucvterm",
"product_id": "s390utils-iucvterm",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-iucvterm"
}
}
},
{
"category": "product_version",
"name": "s390utils-base",
"product": {
"name": "s390utils-base",
"product_id": "s390utils-base",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/s390utils-base"
}
}
},
{
"category": "product_version",
"name": "snphost.src",
"product": {
"name": "snphost.src",
"product_id": "snphost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/snphost?arch=src"
}
}
},
{
"category": "product_version",
"name": "trustee-kbs",
"product": {
"name": "trustee-kbs",
"product_id": "trustee-kbs",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/trustee-kbs"
}
}
},
{
"category": "product_version",
"name": "trustee-guest-components.src",
"product": {
"name": "trustee-guest-components.src",
"product_id": "trustee-guest-components.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/trustee-guest-components?arch=src"
}
}
},
{
"category": "product_version",
"name": "curl-minimal",
"product": {
"name": "curl-minimal",
"product_id": "curl-minimal",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl-minimal"
}
}
},
{
"category": "product_version",
"name": "rust-std-static-wasm32-wasi",
"product": {
"name": "rust-std-static-wasm32-wasi",
"product_id": "rust-std-static-wasm32-wasi",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-std-static-wasm32-wasi"
}
}
},
{
"category": "product_version",
"name": "rust-analysis",
"product": {
"name": "rust-analysis",
"product_id": "rust-analysis",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-analysis"
}
}
},
{
"category": "product_version",
"name": "rust",
"product": {
"name": "rust",
"product_id": "rust",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust"
}
}
},
{
"category": "product_version",
"name": "openshift/ose-rhel-coreos-8",
"product": {
"name": "openshift/ose-rhel-coreos-8",
"product_id": "openshift/ose-rhel-coreos-8",
"product_identification_helper": {
"purl": "pkg:oci/ose-rhel-coreos-8?repository_url=registry.redhat.io/openshift/ose-rhel-coreos-8"
}
}
},
{
"category": "product_version",
"name": "openshift/ose-rhel-coreos-9",
"product": {
"name": "openshift/ose-rhel-coreos-9",
"product_id": "openshift/ose-rhel-coreos-9",
"product_identification_helper": {
"purl": "pkg:oci/ose-rhel-coreos-9?repository_url=registry.redhat.io/openshift/ose-rhel-coreos-9"
}
}
},
{
"category": "product_version",
"name": "devspaces/code-rhel9",
"product": {
"name": "devspaces/code-rhel9",
"product_id": "devspaces/code-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/code-rhel9?repository_url=registry.redhat.io/devspaces/code-rhel9"
}
}
},
{
"category": "product_version",
"name": "rhtpa/rhtpa-trustification-service-rhel9",
"product": {
"name": "rhtpa/rhtpa-trustification-service-rhel9",
"product_id": "rhtpa/rhtpa-trustification-service-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/rhtpa-trustification-service-rhel9?repository_url=registry.redhat.io/rhtpa/rhtpa-trustification-service-rhel9"
}
}
},
{
"branches": [
{
"category": "product_version",
"name": "curl-main@aarch64",
"product": {
"name": "curl-main@aarch64",
"product_id": "curl-main@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl@8.20.0-0.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "curl-main@src",
"product": {
"name": "curl-main@src",
"product_id": "curl-main@src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl@8.20.0-0.1.hum1?arch=src&distro=hummingbird-20251124&repository_id=public-hummingbird-source-rpms"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "curl-main@x86_64",
"product": {
"name": "curl-main@x86_64",
"product_id": "curl-main@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl@8.20.0-0.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-main@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:curl-main@aarch64"
},
"product_reference": "curl-main@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-main@src as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:curl-main@src"
},
"product_reference": "curl-main@src",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-main@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:curl-main@x86_64"
},
"product_reference": "curl-main@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "build-of-trustee/trustee-rhel9 as a component of Confidential Compute Attestation",
"product_id": "confidential_compute_attestation:build-of-trustee/trustee-rhel9"
},
"product_reference": "build-of-trustee/trustee-rhel9",
"relates_to_product_reference": "confidential_compute_attestation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "confidential-compute-attestation-tech-preview/trustee-rhel9 as a component of Confidential Compute Attestation",
"product_id": "confidential_compute_attestation:confidential-compute-attestation-tech-preview/trustee-rhel9"
},
"product_reference": "confidential-compute-attestation-tech-preview/trustee-rhel9",
"relates_to_product_reference": "confidential_compute_attestation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-sandboxed-containers/osc-operator-bundle as a component of Confidential Compute Attestation",
"product_id": "confidential_compute_attestation:openshift-sandboxed-containers/osc-operator-bundle"
},
"product_reference": "openshift-sandboxed-containers/osc-operator-bundle",
"relates_to_product_reference": "confidential_compute_attestation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-sandboxed-containers/osc-podvm-builder-rhel9 as a component of Confidential Compute Attestation",
"product_id": "confidential_compute_attestation:openshift-sandboxed-containers/osc-podvm-builder-rhel9"
},
"product_reference": "openshift-sandboxed-containers/osc-podvm-builder-rhel9",
"relates_to_product_reference": "confidential_compute_attestation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-sandboxed-containers/osc-podvm-payload-rhel9 as a component of Confidential Compute Attestation",
"product_id": "confidential_compute_attestation:openshift-sandboxed-containers/osc-podvm-payload-rhel9"
},
"product_reference": "openshift-sandboxed-containers/osc-podvm-payload-rhel9",
"relates_to_product_reference": "confidential_compute_attestation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-sandboxed-containers/osc-rhel9-operator as a component of Confidential Compute Attestation",
"product_id": "confidential_compute_attestation:openshift-sandboxed-containers/osc-rhel9-operator"
},
"product_reference": "openshift-sandboxed-containers/osc-rhel9-operator",
"relates_to_product_reference": "confidential_compute_attestation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/cluster-logging-operator-bundle as a component of Logging Subsystem for Red Hat OpenShift",
"product_id": "logging_subsystem_for_red_hat_openshift:openshift-logging/cluster-logging-operator-bundle"
},
"product_reference": "openshift-logging/cluster-logging-operator-bundle",
"relates_to_product_reference": "logging_subsystem_for_red_hat_openshift"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/cluster-logging-rhel9-operator as a component of Logging Subsystem for Red Hat OpenShift",
"product_id": "logging_subsystem_for_red_hat_openshift:openshift-logging/cluster-logging-rhel9-operator"
},
"product_reference": "openshift-logging/cluster-logging-rhel9-operator",
"relates_to_product_reference": "logging_subsystem_for_red_hat_openshift"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/eventrouter-rhel9 as a component of Logging Subsystem for Red Hat OpenShift",
"product_id": "logging_subsystem_for_red_hat_openshift:openshift-logging/eventrouter-rhel9"
},
"product_reference": "openshift-logging/eventrouter-rhel9",
"relates_to_product_reference": "logging_subsystem_for_red_hat_openshift"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/fluentd-rhel9 as a component of Logging Subsystem for Red Hat OpenShift",
"product_id": "logging_subsystem_for_red_hat_openshift:openshift-logging/fluentd-rhel9"
},
"product_reference": "openshift-logging/fluentd-rhel9",
"relates_to_product_reference": "logging_subsystem_for_red_hat_openshift"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/log-file-metric-exporter-rhel9 as a component of Logging Subsystem for Red Hat OpenShift",
"product_id": "logging_subsystem_for_red_hat_openshift:openshift-logging/log-file-metric-exporter-rhel9"
},
"product_reference": "openshift-logging/log-file-metric-exporter-rhel9",
"relates_to_product_reference": "logging_subsystem_for_red_hat_openshift"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/logging-view-plugin-rhel9 as a component of Logging Subsystem for Red Hat OpenShift",
"product_id": "logging_subsystem_for_red_hat_openshift:openshift-logging/logging-view-plugin-rhel9"
},
"product_reference": "openshift-logging/logging-view-plugin-rhel9",
"relates_to_product_reference": "logging_subsystem_for_red_hat_openshift"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/vector-rhel9 as a component of Logging Subsystem for Red Hat OpenShift",
"product_id": "logging_subsystem_for_red_hat_openshift:openshift-logging/vector-rhel9"
},
"product_reference": "openshift-logging/vector-rhel9",
"relates_to_product_reference": "logging_subsystem_for_red_hat_openshift"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:cargo"
},
"product_reference": "cargo",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clippy as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:clippy"
},
"product_reference": "clippy",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:curl"
},
"product_reference": "curl",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl.src as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:curl.src"
},
"product_reference": "curl.src",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:libcurl"
},
"product_reference": "libcurl",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:libcurl-devel"
},
"product_reference": "libcurl-devel",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-minimal as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:libcurl-minimal"
},
"product_reference": "libcurl-minimal",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-analyzer as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-analyzer"
},
"product_reference": "rust-analyzer",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-debugger-common as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-debugger-common"
},
"product_reference": "rust-debugger-common",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-doc as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-doc"
},
"product_reference": "rust-doc",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-gdb as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-gdb"
},
"product_reference": "rust-gdb",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-lldb as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-lldb"
},
"product_reference": "rust-lldb",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-src as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-src"
},
"product_reference": "rust-src",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-std-static"
},
"product_reference": "rust-std-static",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-aarch64-unknown-none-softfloat as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-std-static-aarch64-unknown-none-softfloat"
},
"product_reference": "rust-std-static-aarch64-unknown-none-softfloat",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-wasm32-unknown-unknown as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-std-static-wasm32-unknown-unknown"
},
"product_reference": "rust-std-static-wasm32-unknown-unknown",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-wasm32-wasip1 as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-std-static-wasm32-wasip1"
},
"product_reference": "rust-std-static-wasm32-wasip1",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-x86_64-unknown-none as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-std-static-x86_64-unknown-none"
},
"product_reference": "rust-std-static-x86_64-unknown-none",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-toolset as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-toolset"
},
"product_reference": "rust-toolset",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-toolset-srpm-macros as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust-toolset-srpm-macros"
},
"product_reference": "rust-toolset-srpm-macros",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust.src as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rust.src"
},
"product_reference": "rust.src",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rustfmt as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:rustfmt"
},
"product_reference": "rustfmt",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-base as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-base"
},
"product_reference": "s390utils-base",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-chreipl-fcp-mpath as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-chreipl-fcp-mpath"
},
"product_reference": "s390utils-chreipl-fcp-mpath",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-cmsfs-fuse as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-cmsfs-fuse"
},
"product_reference": "s390utils-cmsfs-fuse",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-core as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-core"
},
"product_reference": "s390utils-core",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-cpacfstatsd as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-cpacfstatsd"
},
"product_reference": "s390utils-cpacfstatsd",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-cpuplugd as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-cpuplugd"
},
"product_reference": "s390utils-cpuplugd",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-devel as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-devel"
},
"product_reference": "s390utils-devel",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-hmcdrvfs as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-hmcdrvfs"
},
"product_reference": "s390utils-hmcdrvfs",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-iucvterm as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-iucvterm"
},
"product_reference": "s390utils-iucvterm",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-mon_statd as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-mon_statd"
},
"product_reference": "s390utils-mon_statd",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-osasnmpd as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-osasnmpd"
},
"product_reference": "s390utils-osasnmpd",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-se-data as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-se-data"
},
"product_reference": "s390utils-se-data",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-zdsfs as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-zdsfs"
},
"product_reference": "s390utils-zdsfs",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils-ziomon as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils-ziomon"
},
"product_reference": "s390utils-ziomon",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "s390utils.src as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:s390utils.src"
},
"product_reference": "s390utils.src",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "snphost.src as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:snphost.src"
},
"product_reference": "snphost.src",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trustee-guest-components.src as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:trustee-guest-components.src"
},
"product_reference": "trustee-guest-components.src",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trustee-kbs as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:trustee-kbs"
},
"product_reference": "trustee-kbs",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl as a component of Red Hat Enterprise Linux 6",
"product_id": "red_hat_enterprise_linux_6:curl"
},
"product_reference": "curl",
"relates_to_product_reference": "red_hat_enterprise_linux_6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl.src as a component of Red Hat Enterprise Linux 6",
"product_id": "red_hat_enterprise_linux_6:curl.src"
},
"product_reference": "curl.src",
"relates_to_product_reference": "red_hat_enterprise_linux_6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl as a component of Red Hat Enterprise Linux 6",
"product_id": "red_hat_enterprise_linux_6:libcurl"
},
"product_reference": "libcurl",
"relates_to_product_reference": "red_hat_enterprise_linux_6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel as a component of Red Hat Enterprise Linux 6",
"product_id": "red_hat_enterprise_linux_6:libcurl-devel"
},
"product_reference": "libcurl-devel",
"relates_to_product_reference": "red_hat_enterprise_linux_6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:curl"
},
"product_reference": "curl",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl.src as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:curl.src"
},
"product_reference": "curl.src",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:libcurl"
},
"product_reference": "libcurl",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:libcurl-devel"
},
"product_reference": "libcurl-devel",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:curl"
},
"product_reference": "curl",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl.src as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:curl.src"
},
"product_reference": "curl.src",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:libcurl"
},
"product_reference": "libcurl",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:libcurl-devel"
},
"product_reference": "libcurl-devel",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-minimal as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:libcurl-minimal"
},
"product_reference": "libcurl-minimal",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:cargo"
},
"product_reference": "cargo",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clippy as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:clippy"
},
"product_reference": "clippy",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:curl"
},
"product_reference": "curl",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-minimal as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:curl-minimal"
},
"product_reference": "curl-minimal",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl.src as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:curl.src"
},
"product_reference": "curl.src",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:libcurl"
},
"product_reference": "libcurl",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:libcurl-devel"
},
"product_reference": "libcurl-devel",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-minimal as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:libcurl-minimal"
},
"product_reference": "libcurl-minimal",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust"
},
"product_reference": "rust",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-analysis as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust-analysis"
},
"product_reference": "rust-analysis",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-analyzer as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust-analyzer"
},
"product_reference": "rust-analyzer",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-debugger-common as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust-debugger-common"
},
"product_reference": "rust-debugger-common",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-doc as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust-doc"
},
"product_reference": "rust-doc",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-gdb as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust-gdb"
},
"product_reference": "rust-gdb",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-lldb as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust-lldb"
},
"product_reference": "rust-lldb",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-src as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust-src"
},
"product_reference": "rust-src",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust-std-static"
},
"product_reference": "rust-std-static",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-wasm32-unknown-unknown as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust-std-static-wasm32-unknown-unknown"
},
"product_reference": "rust-std-static-wasm32-unknown-unknown",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-wasm32-wasi as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust-std-static-wasm32-wasi"
},
"product_reference": "rust-std-static-wasm32-wasi",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-toolset as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust-toolset"
},
"product_reference": "rust-toolset",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust.src as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rust.src"
},
"product_reference": "rust.src",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rustfmt as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:rustfmt"
},
"product_reference": "rustfmt",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "snphost.src as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:snphost.src"
},
"product_reference": "snphost.src",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trustee-guest-components.src as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:trustee-guest-components.src"
},
"product_reference": "trustee-guest-components.src",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust.src as a component of Red Hat Enterprise Linux AI (RHEL AI) 3",
"product_id": "red_hat_enterprise_linux_ai_(rhel_ai)_3:rust.src"
},
"product_reference": "rust.src",
"relates_to_product_reference": "red_hat_enterprise_linux_ai_(rhel_ai)_3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust.src as a component of Red Hat Hardened Images",
"product_id": "red_hat_hardened_images:rust.src"
},
"product_reference": "rust.src",
"relates_to_product_reference": "red_hat_hardened_images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl as a component of Red Hat JBoss Core Services",
"product_id": "red_hat_jboss_core_services:curl"
},
"product_reference": "curl",
"relates_to_product_reference": "red_hat_jboss_core_services"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4",
"product_id": "red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-8"
},
"product_reference": "openshift/ose-rhel-coreos-8",
"relates_to_product_reference": "red_hat_openshift_container_platform_4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4",
"product_id": "red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-9"
},
"product_reference": "openshift/ose-rhel-coreos-9",
"relates_to_product_reference": "red_hat_openshift_container_platform_4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "devspaces/code-rhel9 as a component of Red Hat OpenShift Dev Spaces",
"product_id": "red_hat_openshift_dev_spaces:devspaces/code-rhel9"
},
"product_reference": "devspaces/code-rhel9",
"relates_to_product_reference": "red_hat_openshift_dev_spaces"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhtpa/rhtpa-trustification-service-rhel9 as a component of Red Hat Trusted Profile Analyzer",
"product_id": "red_hat_trusted_profile_analyzer:rhtpa/rhtpa-trustification-service-rhel9"
},
"product_reference": "rhtpa/rhtpa-trustification-service-rhel9",
"relates_to_product_reference": "red_hat_trusted_profile_analyzer"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-6276",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-04-23T16:35:33.888000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"red_hat_hardened_images:rust.src"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461203"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libcurl. This vulnerability allows for information disclosure when a custom `Host:` header is used in an initial HTTP request, and a subsequent request reuses the same connection without specifying a new `Host:` header. This can lead to libcurl incorrectly sending cookies intended for the first host to the second host, resulting in a cookie leak. This issue is categorized as an Origin Validation Error (CWE-346). Exploitation typically requires specific debugging configurations.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Low severity flaw affects libcurl when a custom `Host:` header is initially set for an HTTP request, and a subsequent request uses the same easy handle without a custom `Host:` header. This can lead to the second request sending cookies intended for the first host. The `curl` command-line tool is not affected by this issue. Exploitation typically requires specific debugging configurations, reducing its overall impact.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64"
],
"known_affected": [
"confidential_compute_attestation:build-of-trustee/trustee-rhel9",
"confidential_compute_attestation:confidential-compute-attestation-tech-preview/trustee-rhel9",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-operator-bundle",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-podvm-builder-rhel9",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-podvm-payload-rhel9",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-rhel9-operator",
"logging_subsystem_for_red_hat_openshift:openshift-logging/cluster-logging-operator-bundle",
"logging_subsystem_for_red_hat_openshift:openshift-logging/cluster-logging-rhel9-operator",
"logging_subsystem_for_red_hat_openshift:openshift-logging/eventrouter-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/fluentd-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/log-file-metric-exporter-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/logging-view-plugin-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/vector-rhel9",
"red_hat_enterprise_linux_10:cargo",
"red_hat_enterprise_linux_10:clippy",
"red_hat_enterprise_linux_10:curl",
"red_hat_enterprise_linux_10:curl.src",
"red_hat_enterprise_linux_10:libcurl",
"red_hat_enterprise_linux_10:libcurl-devel",
"red_hat_enterprise_linux_10:libcurl-minimal",
"red_hat_enterprise_linux_10:rust-analyzer",
"red_hat_enterprise_linux_10:rust-debugger-common",
"red_hat_enterprise_linux_10:rust-doc",
"red_hat_enterprise_linux_10:rust-gdb",
"red_hat_enterprise_linux_10:rust-lldb",
"red_hat_enterprise_linux_10:rust-src",
"red_hat_enterprise_linux_10:rust-std-static",
"red_hat_enterprise_linux_10:rust-std-static-aarch64-unknown-none-softfloat",
"red_hat_enterprise_linux_10:rust-std-static-wasm32-unknown-unknown",
"red_hat_enterprise_linux_10:rust-std-static-wasm32-wasip1",
"red_hat_enterprise_linux_10:rust-std-static-x86_64-unknown-none",
"red_hat_enterprise_linux_10:rust-toolset",
"red_hat_enterprise_linux_10:rust-toolset-srpm-macros",
"red_hat_enterprise_linux_10:rust.src",
"red_hat_enterprise_linux_10:rustfmt",
"red_hat_enterprise_linux_10:s390utils-base",
"red_hat_enterprise_linux_10:s390utils-chreipl-fcp-mpath",
"red_hat_enterprise_linux_10:s390utils-cmsfs-fuse",
"red_hat_enterprise_linux_10:s390utils-core",
"red_hat_enterprise_linux_10:s390utils-cpacfstatsd",
"red_hat_enterprise_linux_10:s390utils-cpuplugd",
"red_hat_enterprise_linux_10:s390utils-devel",
"red_hat_enterprise_linux_10:s390utils-hmcdrvfs",
"red_hat_enterprise_linux_10:s390utils-iucvterm",
"red_hat_enterprise_linux_10:s390utils-mon_statd",
"red_hat_enterprise_linux_10:s390utils-osasnmpd",
"red_hat_enterprise_linux_10:s390utils-se-data",
"red_hat_enterprise_linux_10:s390utils-zdsfs",
"red_hat_enterprise_linux_10:s390utils-ziomon",
"red_hat_enterprise_linux_10:s390utils.src",
"red_hat_enterprise_linux_10:snphost.src",
"red_hat_enterprise_linux_10:trustee-guest-components.src",
"red_hat_enterprise_linux_10:trustee-kbs",
"red_hat_enterprise_linux_6:curl",
"red_hat_enterprise_linux_6:curl.src",
"red_hat_enterprise_linux_6:libcurl",
"red_hat_enterprise_linux_6:libcurl-devel",
"red_hat_enterprise_linux_7:curl",
"red_hat_enterprise_linux_7:curl.src",
"red_hat_enterprise_linux_7:libcurl",
"red_hat_enterprise_linux_7:libcurl-devel",
"red_hat_enterprise_linux_8:curl",
"red_hat_enterprise_linux_8:curl.src",
"red_hat_enterprise_linux_8:libcurl",
"red_hat_enterprise_linux_8:libcurl-devel",
"red_hat_enterprise_linux_8:libcurl-minimal",
"red_hat_enterprise_linux_9:cargo",
"red_hat_enterprise_linux_9:clippy",
"red_hat_enterprise_linux_9:curl",
"red_hat_enterprise_linux_9:curl-minimal",
"red_hat_enterprise_linux_9:curl.src",
"red_hat_enterprise_linux_9:libcurl",
"red_hat_enterprise_linux_9:libcurl-devel",
"red_hat_enterprise_linux_9:libcurl-minimal",
"red_hat_enterprise_linux_9:rust",
"red_hat_enterprise_linux_9:rust-analysis",
"red_hat_enterprise_linux_9:rust-analyzer",
"red_hat_enterprise_linux_9:rust-debugger-common",
"red_hat_enterprise_linux_9:rust-doc",
"red_hat_enterprise_linux_9:rust-gdb",
"red_hat_enterprise_linux_9:rust-lldb",
"red_hat_enterprise_linux_9:rust-src",
"red_hat_enterprise_linux_9:rust-std-static",
"red_hat_enterprise_linux_9:rust-std-static-wasm32-unknown-unknown",
"red_hat_enterprise_linux_9:rust-std-static-wasm32-wasi",
"red_hat_enterprise_linux_9:rust-toolset",
"red_hat_enterprise_linux_9:rust.src",
"red_hat_enterprise_linux_9:rustfmt",
"red_hat_enterprise_linux_9:snphost.src",
"red_hat_enterprise_linux_9:trustee-guest-components.src",
"red_hat_enterprise_linux_ai_(rhel_ai)_3:rust.src",
"red_hat_jboss_core_services:curl",
"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-8",
"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-9",
"red_hat_openshift_dev_spaces:devspaces/code-rhel9",
"red_hat_trusted_profile_analyzer:rhtpa/rhtpa-trustification-service-rhel9"
],
"known_not_affected": [
"red_hat_hardened_images:rust.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6276"
},
{
"category": "external",
"summary": "RHBZ#2461203",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461203"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6276",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6276"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6276",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6276"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-6276.html",
"url": "https://curl.se/docs/CVE-2026-6276.html"
}
],
"release_date": "2026-04-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-02T00:23:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64"
],
"url": "https://access.redhat.com/errata/RHSA-2026:12916"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid using custom `Host:` headers with libcurl, especially when reusing the same easy handle for multiple requests. This vulnerability primarily arises from specific debugging configurations.",
"product_ids": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64",
"confidential_compute_attestation:build-of-trustee/trustee-rhel9",
"confidential_compute_attestation:confidential-compute-attestation-tech-preview/trustee-rhel9",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-operator-bundle",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-podvm-builder-rhel9",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-podvm-payload-rhel9",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-rhel9-operator",
"logging_subsystem_for_red_hat_openshift:openshift-logging/cluster-logging-operator-bundle",
"logging_subsystem_for_red_hat_openshift:openshift-logging/cluster-logging-rhel9-operator",
"logging_subsystem_for_red_hat_openshift:openshift-logging/eventrouter-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/fluentd-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/log-file-metric-exporter-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/logging-view-plugin-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/vector-rhel9",
"red_hat_enterprise_linux_10:cargo",
"red_hat_enterprise_linux_10:clippy",
"red_hat_enterprise_linux_10:curl",
"red_hat_enterprise_linux_10:curl.src",
"red_hat_enterprise_linux_10:libcurl",
"red_hat_enterprise_linux_10:libcurl-devel",
"red_hat_enterprise_linux_10:libcurl-minimal",
"red_hat_enterprise_linux_10:rust-analyzer",
"red_hat_enterprise_linux_10:rust-debugger-common",
"red_hat_enterprise_linux_10:rust-doc",
"red_hat_enterprise_linux_10:rust-gdb",
"red_hat_enterprise_linux_10:rust-lldb",
"red_hat_enterprise_linux_10:rust-src",
"red_hat_enterprise_linux_10:rust-std-static",
"red_hat_enterprise_linux_10:rust-std-static-aarch64-unknown-none-softfloat",
"red_hat_enterprise_linux_10:rust-std-static-wasm32-unknown-unknown",
"red_hat_enterprise_linux_10:rust-std-static-wasm32-wasip1",
"red_hat_enterprise_linux_10:rust-std-static-x86_64-unknown-none",
"red_hat_enterprise_linux_10:rust-toolset",
"red_hat_enterprise_linux_10:rust-toolset-srpm-macros",
"red_hat_enterprise_linux_10:rust.src",
"red_hat_enterprise_linux_10:rustfmt",
"red_hat_enterprise_linux_10:s390utils-base",
"red_hat_enterprise_linux_10:s390utils-chreipl-fcp-mpath",
"red_hat_enterprise_linux_10:s390utils-cmsfs-fuse",
"red_hat_enterprise_linux_10:s390utils-core",
"red_hat_enterprise_linux_10:s390utils-cpacfstatsd",
"red_hat_enterprise_linux_10:s390utils-cpuplugd",
"red_hat_enterprise_linux_10:s390utils-devel",
"red_hat_enterprise_linux_10:s390utils-hmcdrvfs",
"red_hat_enterprise_linux_10:s390utils-iucvterm",
"red_hat_enterprise_linux_10:s390utils-mon_statd",
"red_hat_enterprise_linux_10:s390utils-osasnmpd",
"red_hat_enterprise_linux_10:s390utils-se-data",
"red_hat_enterprise_linux_10:s390utils-zdsfs",
"red_hat_enterprise_linux_10:s390utils-ziomon",
"red_hat_enterprise_linux_10:s390utils.src",
"red_hat_enterprise_linux_10:snphost.src",
"red_hat_enterprise_linux_10:trustee-guest-components.src",
"red_hat_enterprise_linux_10:trustee-kbs",
"red_hat_enterprise_linux_6:curl",
"red_hat_enterprise_linux_6:curl.src",
"red_hat_enterprise_linux_6:libcurl",
"red_hat_enterprise_linux_6:libcurl-devel",
"red_hat_enterprise_linux_7:curl",
"red_hat_enterprise_linux_7:curl.src",
"red_hat_enterprise_linux_7:libcurl",
"red_hat_enterprise_linux_7:libcurl-devel",
"red_hat_enterprise_linux_8:curl",
"red_hat_enterprise_linux_8:curl.src",
"red_hat_enterprise_linux_8:libcurl",
"red_hat_enterprise_linux_8:libcurl-devel",
"red_hat_enterprise_linux_8:libcurl-minimal",
"red_hat_enterprise_linux_9:cargo",
"red_hat_enterprise_linux_9:clippy",
"red_hat_enterprise_linux_9:curl",
"red_hat_enterprise_linux_9:curl-minimal",
"red_hat_enterprise_linux_9:curl.src",
"red_hat_enterprise_linux_9:libcurl",
"red_hat_enterprise_linux_9:libcurl-devel",
"red_hat_enterprise_linux_9:libcurl-minimal",
"red_hat_enterprise_linux_9:rust",
"red_hat_enterprise_linux_9:rust-analysis",
"red_hat_enterprise_linux_9:rust-analyzer",
"red_hat_enterprise_linux_9:rust-debugger-common",
"red_hat_enterprise_linux_9:rust-doc",
"red_hat_enterprise_linux_9:rust-gdb",
"red_hat_enterprise_linux_9:rust-lldb",
"red_hat_enterprise_linux_9:rust-src",
"red_hat_enterprise_linux_9:rust-std-static",
"red_hat_enterprise_linux_9:rust-std-static-wasm32-unknown-unknown",
"red_hat_enterprise_linux_9:rust-std-static-wasm32-wasi",
"red_hat_enterprise_linux_9:rust-toolset",
"red_hat_enterprise_linux_9:rust.src",
"red_hat_enterprise_linux_9:rustfmt",
"red_hat_enterprise_linux_9:snphost.src",
"red_hat_enterprise_linux_9:trustee-guest-components.src",
"red_hat_enterprise_linux_ai_(rhel_ai)_3:rust.src",
"red_hat_jboss_core_services:curl",
"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-8",
"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-9",
"red_hat_openshift_dev_spaces:devspaces/code-rhel9",
"red_hat_trusted_profile_analyzer:rhtpa/rhtpa-trustification-service-rhel9"
]
},
{
"category": "none_available",
"details": "Fix deferred",
"product_ids": [
"confidential_compute_attestation:build-of-trustee/trustee-rhel9",
"confidential_compute_attestation:confidential-compute-attestation-tech-preview/trustee-rhel9",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-operator-bundle",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-podvm-builder-rhel9",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-podvm-payload-rhel9",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-rhel9-operator",
"logging_subsystem_for_red_hat_openshift:openshift-logging/cluster-logging-operator-bundle",
"logging_subsystem_for_red_hat_openshift:openshift-logging/cluster-logging-rhel9-operator",
"logging_subsystem_for_red_hat_openshift:openshift-logging/eventrouter-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/fluentd-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/log-file-metric-exporter-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/logging-view-plugin-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/vector-rhel9",
"red_hat_enterprise_linux_10:cargo",
"red_hat_enterprise_linux_10:clippy",
"red_hat_enterprise_linux_10:rust-analyzer",
"red_hat_enterprise_linux_10:rust-debugger-common",
"red_hat_enterprise_linux_10:rust-doc",
"red_hat_enterprise_linux_10:rust-gdb",
"red_hat_enterprise_linux_10:rust-lldb",
"red_hat_enterprise_linux_10:rust-src",
"red_hat_enterprise_linux_10:rust-std-static",
"red_hat_enterprise_linux_10:rust-std-static-aarch64-unknown-none-softfloat",
"red_hat_enterprise_linux_10:rust-std-static-wasm32-unknown-unknown",
"red_hat_enterprise_linux_10:rust-std-static-wasm32-wasip1",
"red_hat_enterprise_linux_10:rust-std-static-x86_64-unknown-none",
"red_hat_enterprise_linux_10:rust-toolset",
"red_hat_enterprise_linux_10:rust-toolset-srpm-macros",
"red_hat_enterprise_linux_10:rust.src",
"red_hat_enterprise_linux_10:rustfmt",
"red_hat_enterprise_linux_10:s390utils-base",
"red_hat_enterprise_linux_10:s390utils-chreipl-fcp-mpath",
"red_hat_enterprise_linux_10:s390utils-cmsfs-fuse",
"red_hat_enterprise_linux_10:s390utils-core",
"red_hat_enterprise_linux_10:s390utils-cpacfstatsd",
"red_hat_enterprise_linux_10:s390utils-cpuplugd",
"red_hat_enterprise_linux_10:s390utils-devel",
"red_hat_enterprise_linux_10:s390utils-hmcdrvfs",
"red_hat_enterprise_linux_10:s390utils-iucvterm",
"red_hat_enterprise_linux_10:s390utils-mon_statd",
"red_hat_enterprise_linux_10:s390utils-osasnmpd",
"red_hat_enterprise_linux_10:s390utils-se-data",
"red_hat_enterprise_linux_10:s390utils-zdsfs",
"red_hat_enterprise_linux_10:s390utils-ziomon",
"red_hat_enterprise_linux_10:s390utils.src",
"red_hat_enterprise_linux_10:snphost.src",
"red_hat_enterprise_linux_10:trustee-guest-components.src",
"red_hat_enterprise_linux_10:trustee-kbs",
"red_hat_enterprise_linux_6:curl",
"red_hat_enterprise_linux_6:curl.src",
"red_hat_enterprise_linux_6:libcurl",
"red_hat_enterprise_linux_6:libcurl-devel",
"red_hat_enterprise_linux_7:curl",
"red_hat_enterprise_linux_7:curl.src",
"red_hat_enterprise_linux_7:libcurl",
"red_hat_enterprise_linux_7:libcurl-devel",
"red_hat_enterprise_linux_8:curl",
"red_hat_enterprise_linux_8:curl.src",
"red_hat_enterprise_linux_8:libcurl",
"red_hat_enterprise_linux_8:libcurl-devel",
"red_hat_enterprise_linux_8:libcurl-minimal",
"red_hat_enterprise_linux_9:cargo",
"red_hat_enterprise_linux_9:clippy",
"red_hat_enterprise_linux_9:curl",
"red_hat_enterprise_linux_9:curl-minimal",
"red_hat_enterprise_linux_9:curl.src",
"red_hat_enterprise_linux_9:libcurl",
"red_hat_enterprise_linux_9:libcurl-devel",
"red_hat_enterprise_linux_9:libcurl-minimal",
"red_hat_enterprise_linux_9:rust",
"red_hat_enterprise_linux_9:rust-analysis",
"red_hat_enterprise_linux_9:rust-analyzer",
"red_hat_enterprise_linux_9:rust-debugger-common",
"red_hat_enterprise_linux_9:rust-doc",
"red_hat_enterprise_linux_9:rust-gdb",
"red_hat_enterprise_linux_9:rust-lldb",
"red_hat_enterprise_linux_9:rust-src",
"red_hat_enterprise_linux_9:rust-std-static",
"red_hat_enterprise_linux_9:rust-std-static-wasm32-unknown-unknown",
"red_hat_enterprise_linux_9:rust-std-static-wasm32-wasi",
"red_hat_enterprise_linux_9:rust-toolset",
"red_hat_enterprise_linux_9:rust.src",
"red_hat_enterprise_linux_9:rustfmt",
"red_hat_enterprise_linux_9:snphost.src",
"red_hat_enterprise_linux_9:trustee-guest-components.src",
"red_hat_enterprise_linux_ai_(rhel_ai)_3:rust.src",
"red_hat_jboss_core_services:curl",
"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-8",
"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-9",
"red_hat_openshift_dev_spaces:devspaces/code-rhel9",
"red_hat_trusted_profile_analyzer:rhtpa/rhtpa-trustification-service-rhel9"
]
},
{
"category": "none_available",
"details": "Affected",
"product_ids": [
"red_hat_enterprise_linux_10:curl",
"red_hat_enterprise_linux_10:curl.src",
"red_hat_enterprise_linux_10:libcurl",
"red_hat_enterprise_linux_10:libcurl-devel",
"red_hat_enterprise_linux_10:libcurl-minimal"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64",
"confidential_compute_attestation:build-of-trustee/trustee-rhel9",
"confidential_compute_attestation:confidential-compute-attestation-tech-preview/trustee-rhel9",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-operator-bundle",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-podvm-builder-rhel9",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-podvm-payload-rhel9",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-rhel9-operator",
"logging_subsystem_for_red_hat_openshift:openshift-logging/cluster-logging-operator-bundle",
"logging_subsystem_for_red_hat_openshift:openshift-logging/cluster-logging-rhel9-operator",
"logging_subsystem_for_red_hat_openshift:openshift-logging/eventrouter-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/fluentd-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/log-file-metric-exporter-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/logging-view-plugin-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/vector-rhel9",
"red_hat_enterprise_linux_10:cargo",
"red_hat_enterprise_linux_10:clippy",
"red_hat_enterprise_linux_10:curl",
"red_hat_enterprise_linux_10:curl.src",
"red_hat_enterprise_linux_10:libcurl",
"red_hat_enterprise_linux_10:libcurl-devel",
"red_hat_enterprise_linux_10:libcurl-minimal",
"red_hat_enterprise_linux_10:rust-analyzer",
"red_hat_enterprise_linux_10:rust-debugger-common",
"red_hat_enterprise_linux_10:rust-doc",
"red_hat_enterprise_linux_10:rust-gdb",
"red_hat_enterprise_linux_10:rust-lldb",
"red_hat_enterprise_linux_10:rust-src",
"red_hat_enterprise_linux_10:rust-std-static",
"red_hat_enterprise_linux_10:rust-std-static-aarch64-unknown-none-softfloat",
"red_hat_enterprise_linux_10:rust-std-static-wasm32-unknown-unknown",
"red_hat_enterprise_linux_10:rust-std-static-wasm32-wasip1",
"red_hat_enterprise_linux_10:rust-std-static-x86_64-unknown-none",
"red_hat_enterprise_linux_10:rust-toolset",
"red_hat_enterprise_linux_10:rust-toolset-srpm-macros",
"red_hat_enterprise_linux_10:rust.src",
"red_hat_enterprise_linux_10:rustfmt",
"red_hat_enterprise_linux_10:s390utils-base",
"red_hat_enterprise_linux_10:s390utils-chreipl-fcp-mpath",
"red_hat_enterprise_linux_10:s390utils-cmsfs-fuse",
"red_hat_enterprise_linux_10:s390utils-core",
"red_hat_enterprise_linux_10:s390utils-cpacfstatsd",
"red_hat_enterprise_linux_10:s390utils-cpuplugd",
"red_hat_enterprise_linux_10:s390utils-devel",
"red_hat_enterprise_linux_10:s390utils-hmcdrvfs",
"red_hat_enterprise_linux_10:s390utils-iucvterm",
"red_hat_enterprise_linux_10:s390utils-mon_statd",
"red_hat_enterprise_linux_10:s390utils-osasnmpd",
"red_hat_enterprise_linux_10:s390utils-se-data",
"red_hat_enterprise_linux_10:s390utils-zdsfs",
"red_hat_enterprise_linux_10:s390utils-ziomon",
"red_hat_enterprise_linux_10:s390utils.src",
"red_hat_enterprise_linux_10:snphost.src",
"red_hat_enterprise_linux_10:trustee-guest-components.src",
"red_hat_enterprise_linux_10:trustee-kbs",
"red_hat_enterprise_linux_6:curl",
"red_hat_enterprise_linux_6:curl.src",
"red_hat_enterprise_linux_6:libcurl",
"red_hat_enterprise_linux_6:libcurl-devel",
"red_hat_enterprise_linux_7:curl",
"red_hat_enterprise_linux_7:curl.src",
"red_hat_enterprise_linux_7:libcurl",
"red_hat_enterprise_linux_7:libcurl-devel",
"red_hat_enterprise_linux_8:curl",
"red_hat_enterprise_linux_8:curl.src",
"red_hat_enterprise_linux_8:libcurl",
"red_hat_enterprise_linux_8:libcurl-devel",
"red_hat_enterprise_linux_8:libcurl-minimal",
"red_hat_enterprise_linux_9:cargo",
"red_hat_enterprise_linux_9:clippy",
"red_hat_enterprise_linux_9:curl",
"red_hat_enterprise_linux_9:curl-minimal",
"red_hat_enterprise_linux_9:curl.src",
"red_hat_enterprise_linux_9:libcurl",
"red_hat_enterprise_linux_9:libcurl-devel",
"red_hat_enterprise_linux_9:libcurl-minimal",
"red_hat_enterprise_linux_9:rust",
"red_hat_enterprise_linux_9:rust-analysis",
"red_hat_enterprise_linux_9:rust-analyzer",
"red_hat_enterprise_linux_9:rust-debugger-common",
"red_hat_enterprise_linux_9:rust-doc",
"red_hat_enterprise_linux_9:rust-gdb",
"red_hat_enterprise_linux_9:rust-lldb",
"red_hat_enterprise_linux_9:rust-src",
"red_hat_enterprise_linux_9:rust-std-static",
"red_hat_enterprise_linux_9:rust-std-static-wasm32-unknown-unknown",
"red_hat_enterprise_linux_9:rust-std-static-wasm32-wasi",
"red_hat_enterprise_linux_9:rust-toolset",
"red_hat_enterprise_linux_9:rust.src",
"red_hat_enterprise_linux_9:rustfmt",
"red_hat_enterprise_linux_9:snphost.src",
"red_hat_enterprise_linux_9:trustee-guest-components.src",
"red_hat_enterprise_linux_ai_(rhel_ai)_3:rust.src",
"red_hat_hardened_images:rust.src",
"red_hat_jboss_core_services:curl",
"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-8",
"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-9",
"red_hat_openshift_dev_spaces:devspaces/code-rhel9",
"red_hat_trusted_profile_analyzer:rhtpa/rhtpa-trustification-service-rhel9"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low",
"product_ids": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64",
"confidential_compute_attestation:build-of-trustee/trustee-rhel9",
"confidential_compute_attestation:confidential-compute-attestation-tech-preview/trustee-rhel9",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-operator-bundle",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-podvm-builder-rhel9",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-podvm-payload-rhel9",
"confidential_compute_attestation:openshift-sandboxed-containers/osc-rhel9-operator",
"logging_subsystem_for_red_hat_openshift:openshift-logging/cluster-logging-operator-bundle",
"logging_subsystem_for_red_hat_openshift:openshift-logging/cluster-logging-rhel9-operator",
"logging_subsystem_for_red_hat_openshift:openshift-logging/eventrouter-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/fluentd-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/log-file-metric-exporter-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/logging-view-plugin-rhel9",
"logging_subsystem_for_red_hat_openshift:openshift-logging/vector-rhel9",
"red_hat_enterprise_linux_10:cargo",
"red_hat_enterprise_linux_10:clippy",
"red_hat_enterprise_linux_10:curl",
"red_hat_enterprise_linux_10:curl.src",
"red_hat_enterprise_linux_10:libcurl",
"red_hat_enterprise_linux_10:libcurl-devel",
"red_hat_enterprise_linux_10:libcurl-minimal",
"red_hat_enterprise_linux_10:rust-analyzer",
"red_hat_enterprise_linux_10:rust-debugger-common",
"red_hat_enterprise_linux_10:rust-doc",
"red_hat_enterprise_linux_10:rust-gdb",
"red_hat_enterprise_linux_10:rust-lldb",
"red_hat_enterprise_linux_10:rust-src",
"red_hat_enterprise_linux_10:rust-std-static",
"red_hat_enterprise_linux_10:rust-std-static-aarch64-unknown-none-softfloat",
"red_hat_enterprise_linux_10:rust-std-static-wasm32-unknown-unknown",
"red_hat_enterprise_linux_10:rust-std-static-wasm32-wasip1",
"red_hat_enterprise_linux_10:rust-std-static-x86_64-unknown-none",
"red_hat_enterprise_linux_10:rust-toolset",
"red_hat_enterprise_linux_10:rust-toolset-srpm-macros",
"red_hat_enterprise_linux_10:rust.src",
"red_hat_enterprise_linux_10:rustfmt",
"red_hat_enterprise_linux_10:s390utils-base",
"red_hat_enterprise_linux_10:s390utils-chreipl-fcp-mpath",
"red_hat_enterprise_linux_10:s390utils-cmsfs-fuse",
"red_hat_enterprise_linux_10:s390utils-core",
"red_hat_enterprise_linux_10:s390utils-cpacfstatsd",
"red_hat_enterprise_linux_10:s390utils-cpuplugd",
"red_hat_enterprise_linux_10:s390utils-devel",
"red_hat_enterprise_linux_10:s390utils-hmcdrvfs",
"red_hat_enterprise_linux_10:s390utils-iucvterm",
"red_hat_enterprise_linux_10:s390utils-mon_statd",
"red_hat_enterprise_linux_10:s390utils-osasnmpd",
"red_hat_enterprise_linux_10:s390utils-se-data",
"red_hat_enterprise_linux_10:s390utils-zdsfs",
"red_hat_enterprise_linux_10:s390utils-ziomon",
"red_hat_enterprise_linux_10:s390utils.src",
"red_hat_enterprise_linux_10:snphost.src",
"red_hat_enterprise_linux_10:trustee-guest-components.src",
"red_hat_enterprise_linux_10:trustee-kbs",
"red_hat_enterprise_linux_6:curl",
"red_hat_enterprise_linux_6:curl.src",
"red_hat_enterprise_linux_6:libcurl",
"red_hat_enterprise_linux_6:libcurl-devel",
"red_hat_enterprise_linux_7:curl",
"red_hat_enterprise_linux_7:curl.src",
"red_hat_enterprise_linux_7:libcurl",
"red_hat_enterprise_linux_7:libcurl-devel",
"red_hat_enterprise_linux_8:curl",
"red_hat_enterprise_linux_8:curl.src",
"red_hat_enterprise_linux_8:libcurl",
"red_hat_enterprise_linux_8:libcurl-devel",
"red_hat_enterprise_linux_8:libcurl-minimal",
"red_hat_enterprise_linux_9:cargo",
"red_hat_enterprise_linux_9:clippy",
"red_hat_enterprise_linux_9:curl",
"red_hat_enterprise_linux_9:curl-minimal",
"red_hat_enterprise_linux_9:curl.src",
"red_hat_enterprise_linux_9:libcurl",
"red_hat_enterprise_linux_9:libcurl-devel",
"red_hat_enterprise_linux_9:libcurl-minimal",
"red_hat_enterprise_linux_9:rust",
"red_hat_enterprise_linux_9:rust-analysis",
"red_hat_enterprise_linux_9:rust-analyzer",
"red_hat_enterprise_linux_9:rust-debugger-common",
"red_hat_enterprise_linux_9:rust-doc",
"red_hat_enterprise_linux_9:rust-gdb",
"red_hat_enterprise_linux_9:rust-lldb",
"red_hat_enterprise_linux_9:rust-src",
"red_hat_enterprise_linux_9:rust-std-static",
"red_hat_enterprise_linux_9:rust-std-static-wasm32-unknown-unknown",
"red_hat_enterprise_linux_9:rust-std-static-wasm32-wasi",
"red_hat_enterprise_linux_9:rust-toolset",
"red_hat_enterprise_linux_9:rust.src",
"red_hat_enterprise_linux_9:rustfmt",
"red_hat_enterprise_linux_9:snphost.src",
"red_hat_enterprise_linux_9:trustee-guest-components.src",
"red_hat_enterprise_linux_ai_(rhel_ai)_3:rust.src",
"red_hat_hardened_images:rust.src",
"red_hat_jboss_core_services:curl",
"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-8",
"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-9",
"red_hat_openshift_dev_spaces:devspaces/code-rhel9",
"red_hat_trusted_profile_analyzer:rhtpa/rhtpa-trustification-service-rhel9"
]
}
],
"title": "curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headers"
}
]
}