Every applicability statement published about this vulnerability, kept as each source wrote it rather than merged into one verdict. Where sources disagree, both positions are shown.
A statement that names no version covers the whole product, which is not the same as your version falling inside a range. Orderings marked best effort come from schemes with no published comparison algorithm; exact ones follow a published specification.
Precedence decides which claim wins when two sources describe the same product over the same version range. It is a property of the source, not of the claim, and changing it re-ranks the data without re-reading a single document.
| Product | Status | Versions | Remediation | Source | |
|---|---|---|---|---|---|
| red_hat_ansible_automation_platform_2:aap-cloud-ui-container aap-cloud-ui-container as a component of Red Hat Ansible Automation Platform 2 | affected | no version stated vendor label: aap-cloud-ui-container | workaround fix in another branch | csaf_redhat | |
| red_hat_advanced_cluster_management_for_kubernetes_2:acm-multicluster-globalhub-operator-bundle-container acm-multicluster-globalhub-operator-bundle-container as a component of Red Hat Advanced Cluster Management for Kubernetes 2 | affected | no version stated vendor label: acm-multicluster-globalhub-operator-bundle-container | workaround fix in another branch | csaf_redhat | |
| red_hat_openshift_container_platform_4:aws-load-balancer-operator.src aws-load-balancer-operator.src as a component of Red Hat OpenShift Container Platform 4 | affected | no version stated vendor label: aws-load-balancer-operator.src | workaround fix in another branch | csaf_redhat | |
| cost_management_metrics_operator:costmanagement-metrics-operator-container costmanagement-metrics-operator-container as a component of Cost Management Metrics Operator | affected | no version stated vendor label: costmanagement-metrics-operator-container | workaround fix in another branch | csaf_redhat | |
| red_hat_ceph_storage_6:envoy-proxy.src envoy-proxy.src as a component of Red Hat Ceph Storage 6 | affected | no version stated vendor label: envoy-proxy.src | workaround fix in another branch | csaf_redhat | |
| red_hat_openshift_container_platform_4:external-dns-operator.src external-dns-operator.src as a component of Red Hat OpenShift Container Platform 4 | affected | no version stated vendor label: external-dns-operator.src | workaround fix in another branch | csaf_redhat | |
| red_hat_storage_3:go-toolset-7-golang.src go-toolset-7-golang.src as a component of Red Hat Storage 3 | affected | no version stated vendor label: go-toolset-7-golang.src | out of support fix in another branch | csaf_redhat | |
| red_hat_storage_3:golang-bin golang-bin as a component of Red Hat Storage 3 | affected | no version stated vendor label: golang-bin | out of support fix in another branch | csaf_redhat | |
| red_hat_storage_3:golang-docs golang-docs as a component of Red Hat Storage 3 | affected | no version stated vendor label: golang-docs | out of support fix in another branch | csaf_redhat | |
| red_hat_openstack_platform_16.1:golang-github-infrawatch-apputils.src golang-github-infrawatch-apputils.src as a component of Red Hat OpenStack Platform 16.1 | affected | no version stated vendor label: golang-github-infrawatch-apputils.src | out of support fix in another branch | csaf_redhat | |
| red_hat_storage_3:golang-misc golang-misc as a component of Red Hat Storage 3 | affected | no version stated vendor label: golang-misc | out of support fix in another branch | csaf_redhat | |
| red_hat_storage_3:golang-src golang-src as a component of Red Hat Storage 3 | affected | no version stated vendor label: golang-src | out of support fix in another branch | csaf_redhat | |
| red_hat_storage_3:golang-tests golang-tests as a component of Red Hat Storage 3 | affected | no version stated vendor label: golang-tests | out of support fix in another branch | csaf_redhat | |
| red_hat_storage_3:golang.src golang.src as a component of Red Hat Storage 3 | affected | no version stated vendor label: golang.src | out of support fix in another branch | csaf_redhat | |
| red_hat_ceph_storage_5:grafana.src grafana.src as a component of Red Hat Ceph Storage 5 | affected | no version stated vendor label: grafana.src | workaround fix in another branch | csaf_redhat | |
| red_hat_ceph_storage_6:grafana.src grafana.src as a component of Red Hat Ceph Storage 6 | affected | no version stated vendor label: grafana.src | workaround fix in another branch | csaf_redhat | |
| red_hat_openshift_container_platform_3.11:haproxy.src haproxy.src as a component of Red Hat OpenShift Container Platform 3.11 | affected | no version stated vendor label: haproxy.src | out of support fix in another branch | csaf_redhat | |
| red_hat_openstack_platform_16.1:haproxy.src haproxy.src as a component of Red Hat OpenStack Platform 16.1 | affected | no version stated vendor label: haproxy.src | out of support fix in another branch | csaf_redhat | |
| red_hat_openshift_container_platform_3.11:haproxy18 haproxy18 as a component of Red Hat OpenShift Container Platform 3.11 | affected | no version stated vendor label: haproxy18 | out of support fix in another branch | csaf_redhat | |
| red_hat_storage_3:heketi heketi as a component of Red Hat Storage 3 | affected | no version stated vendor label: heketi | out of support fix in another branch | csaf_redhat | |
| red_hat_storage_3:heketi-client heketi-client as a component of Red Hat Storage 3 | affected | no version stated vendor label: heketi-client | out of support fix in another branch | csaf_redhat | |
| red_hat_storage_3:heketi.src heketi.src as a component of Red Hat Storage 3 | affected | no version stated vendor label: heketi.src | out of support fix in another branch | csaf_redhat | |
| red_hat_openshift_container_platform_3.11:jenkins jenkins as a component of Red Hat OpenShift Container Platform 3.11 | affected | no version stated vendor label: jenkins | out of support fix in another branch | csaf_redhat | |
| red_hat_openshift_container_platform_4:jenkins jenkins as a component of Red Hat OpenShift Container Platform 4 | affected | no version stated vendor label: jenkins | out of support fix in another branch | csaf_redhat | |
| red_hat_openshift_container_platform_3.11:jenkins.src jenkins.src as a component of Red Hat OpenShift Container Platform 3.11 | affected | no version stated vendor label: jenkins.src | out of support fix in another branch | csaf_redhat | |
| red_hat_openshift_container_platform_4:jenkins.src jenkins.src as a component of Red Hat OpenShift Container Platform 4 | affected | no version stated vendor label: jenkins.src | out of support fix in another branch | csaf_redhat | |
| openshift_serverless:knative-eventing knative-eventing as a component of OpenShift Serverless | affected | no version stated vendor label: knative-eventing | workaround fix in another branch | csaf_redhat | |
| red_hat_jboss_core_services:mod_http2.src mod_http2.src as a component of Red Hat JBoss Core Services | affected | no version stated vendor label: mod_http2.src | workaround fix in another branch | csaf_redhat | |
| red_hat_decision_manager_7:netty netty as a component of Red Hat Decision Manager 7 | affected | no version stated vendor label: netty | out of support fix in another branch | csaf_redhat | |
| cryostat_2:netty-codec-http2 netty-codec-http2 as a component of Cryostat 2 | affected | no version stated vendor label: netty-codec-http2 | out of support fix in another branch | csaf_redhat | |
| red_hat_build_of_apicurio_registry_2:netty-codec-http2 netty-codec-http2 as a component of Red Hat build of Apicurio Registry 2 | affected | no version stated vendor label: netty-codec-http2 | workaround fix in another branch | csaf_redhat | |
| red_hat_jboss_enterprise_application_platform_7:netty-codec-http2 netty-codec-http2 as a component of Red Hat JBoss Enterprise Application Platform 7 | affected | no version stated vendor label: netty-codec-http2 | workaround fix in another branch | csaf_redhat | |
| red_hat_jboss_enterprise_application_platform_expansion_pack:netty-codec-http2 netty-codec-http2 as a component of Red Hat JBoss Enterprise Application Platform Expansion Pack | affected | no version stated vendor label: netty-codec-http2 | workaround fix in another branch | csaf_redhat | |
| red_hat_jboss_fuse_6:netty-codec-http2 netty-codec-http2 as a component of Red Hat JBoss Fuse 6 | affected | no version stated vendor label: netty-codec-http2 | out of support fix in another branch | csaf_redhat | |
| red_hat_jboss_fuse_service_works_6:netty-codec-http2 netty-codec-http2 as a component of Red Hat JBoss Fuse Service Works 6 | affected | no version stated vendor label: netty-codec-http2 | out of support fix in another branch | csaf_redhat | |
| red_hat_process_automation_7:netty-codec-http2 netty-codec-http2 as a component of Red Hat Process Automation 7 | affected | no version stated vendor label: netty-codec-http2 | workaround fix in another branch | csaf_redhat | |
| migration_toolkit_for_applications_6:netty-codec-http2.src netty-codec-http2.src as a component of Migration Toolkit for Applications 6 | affected | no version stated vendor label: netty-codec-http2.src | out of support fix in another branch | csaf_redhat | |
| red_hat_ceph_storage_5:nghttp2.src nghttp2.src as a component of Red Hat Ceph Storage 5 | affected | no version stated vendor label: nghttp2.src | workaround fix in another branch | csaf_redhat | |
| red_hat_ceph_storage_6:nghttp2.src nghttp2.src as a component of Red Hat Ceph Storage 6 | affected | no version stated vendor label: nghttp2.src | workaround fix in another branch | csaf_redhat | |
| openshift_developer_tools_and_services:ocp-tools-4/jenkins-rhel8 ocp-tools-4/jenkins-rhel8 as a component of OpenShift Developer Tools and Services | affected | ocp-tools-4/jenkins-rhel8 | workaround fix in another branch | csaf_redhat | |
| red_hat_openshift_data_science_(rhods):odh-mm-rest-proxy-rhel8 odh-mm-rest-proxy-rhel8 as a component of Red Hat OpenShift Data Science (RHODS) | affected | no version stated vendor label: odh-mm-rest-proxy-rhel8 | out of support fix in another branch | csaf_redhat | |
| red_hat_openshift_container_platform_4:openshift-golang-builder-container openshift-golang-builder-container as a component of Red Hat OpenShift Container Platform 4 | affected | no version stated vendor label: openshift-golang-builder-container | workaround fix in another branch | csaf_redhat | |
| red_hat_openshift_virtualization_4:openshift-golang-builder-container openshift-golang-builder-container as a component of Red Hat OpenShift Virtualization 4 | affected | no version stated vendor label: openshift-golang-builder-container | workaround fix in another branch | csaf_redhat | |
| logging_subsystem_for_red_hat_openshift:openshift-logging/logging-loki-rhel9 openshift-logging/logging-loki-rhel9 as a component of Logging Subsystem for Red Hat OpenShift | affected | openshift-logging/logging-loki-rhel9 | workaround fix in another branch | csaf_redhat | |
| red_hat_openstack_platform_16.1:openstack-haproxy-container openstack-haproxy-container as a component of Red Hat OpenStack Platform 16.1 | affected | no version stated vendor label: openstack-haproxy-container | out of support fix in another branch | csaf_redhat | |
| red_hat_openstack_platform_18.0:openstack-haproxy-container openstack-haproxy-container as a component of Red Hat OpenStack Platform 18.0 | affected | no version stated vendor label: openstack-haproxy-container | workaround fix in another branch | csaf_redhat | |
| red_hat_openstack_platform_16.1:openstack-ironic-neutron-agent-container openstack-ironic-neutron-agent-container as a component of Red Hat OpenStack Platform 16.1 | affected | no version stated vendor label: openstack-ironic-neutron-agent-container | out of support fix in another branch | csaf_redhat | |
| red_hat_openstack_platform_18.0:openstack-ironic-neutron-agent-container openstack-ironic-neutron-agent-container as a component of Red Hat OpenStack Platform 18.0 | affected | no version stated vendor label: openstack-ironic-neutron-agent-container | workaround fix in another branch | csaf_redhat | |
| red_hat_openstack_platform_16.1:openstack-neutron-base-container openstack-neutron-base-container as a component of Red Hat OpenStack Platform 16.1 | affected | no version stated vendor label: openstack-neutron-base-container | out of support fix in another branch | csaf_redhat | |
| red_hat_openstack_platform_18.0:openstack-neutron-base-container openstack-neutron-base-container as a component of Red Hat OpenStack Platform 18.0 | affected | no version stated vendor label: openstack-neutron-base-container | workaround fix in another branch | csaf_redhat | |
| red_hat_openstack_platform_16.1:openstack-neutron-dhcp-agent-container openstack-neutron-dhcp-agent-container as a component of Red Hat OpenStack Platform 16.1 | affected | no version stated vendor label: openstack-neutron-dhcp-agent-container | out of support fix in another branch | csaf_redhat | |
| red_hat_openstack_platform_18.0:openstack-neutron-dhcp-agent-container openstack-neutron-dhcp-agent-container as a component of Red Hat OpenStack Platform 18.0 | affected | no version stated vendor label: openstack-neutron-dhcp-agent-container | workaround fix in another branch | csaf_redhat | |
| red_hat_openstack_platform_16.1:openstack-neutron-l3-agent-container openstack-neutron-l3-agent-container as a component of Red Hat OpenStack Platform 16.1 | affected | no version stated vendor label: openstack-neutron-l3-agent-container | out of support fix in another branch | csaf_redhat | |
| red_hat_openstack_platform_16.1:openstack-neutron-metadata-agent-container openstack-neutron-metadata-agent-container as a component of Red Hat OpenStack Platform 16.1 | affected | no version stated vendor label: openstack-neutron-metadata-agent-container | out of support fix in another branch | csaf_redhat | |
| red_hat_openstack_platform_16.1:openstack-neutron-metadata-agent-ovn-container openstack-neutron-metadata-agent-ovn-container as a component of Red Hat OpenStack Platform 16.1 | affected | no version stated vendor label: openstack-neutron-metadata-agent-ovn-container | out of support fix in another branch | csaf_redhat | |
| red_hat_openstack_platform_18.0:openstack-neutron-metadata-agent-ovn-container openstack-neutron-metadata-agent-ovn-container as a component of Red Hat OpenStack Platform 18.0 | affected | no version stated vendor label: openstack-neutron-metadata-agent-ovn-container | workaround fix in another branch | csaf_redhat | |
| red_hat_openstack_platform_16.1:openstack-neutron-openvswitch-agent-container openstack-neutron-openvswitch-agent-container as a component of Red Hat OpenStack Platform 16.1 | affected | no version stated vendor label: openstack-neutron-openvswitch-agent-container | out of support fix in another branch | csaf_redhat | |
| red_hat_openstack_platform_16.1:openstack-neutron-server-container openstack-neutron-server-container as a component of Red Hat OpenStack Platform 16.1 | affected | no version stated vendor label: openstack-neutron-server-container | out of support fix in another branch | csaf_redhat | |
| red_hat_openstack_platform_18.0:openstack-neutron-server-container openstack-neutron-server-container as a component of Red Hat OpenStack Platform 18.0 | affected | no version stated vendor label: openstack-neutron-server-container | workaround fix in another branch | csaf_redhat | |
| red_hat_openstack_platform_16.1:openstack-neutron-server-ovn-container openstack-neutron-server-ovn-container as a component of Red Hat OpenStack Platform 16.1 | affected | no version stated vendor label: openstack-neutron-server-ovn-container | out of support fix in another branch | csaf_redhat |
A claim with no version range is shown as written rather than expanded: a government catalog naming only a vendor and product is a real statement at zero granularity, and inventing bounds for it would put precision in the record that the source never offered.