Every applicability statement published about this vulnerability, kept as each source wrote it rather than merged into one verdict. Where sources disagree, both positions are shown.
A statement that names no version covers the whole product, which is not the same as your version falling inside a range. Orderings marked best effort come from schemes with no published comparison algorithm; exact ones follow a published specification.
Precedence decides which claim wins when two sources describe the same product over the same version range. It is a property of the source, not of the claim, and changing it re-ranks the data without re-reading a single document.
| Product | Status | Versions | Remediation | Source | |
|---|---|---|---|---|---|
| red_hat_ansible_automation_platform_2:aap-azure-ui.src aap-azure-ui.src as a component of Red Hat Ansible Automation Platform 2 | affected | no version stated vendor label: aap-azure-ui.src | no fix planned fix in another branch | csaf_redhat | |
| red_hat_advanced_cluster_security_3:advanced-cluster-security/rhacs-docs-rhel8 advanced-cluster-security/rhacs-docs-rhel8 as a component of Red Hat Advanced Cluster Security 3 | affected | advanced-cluster-security/rhacs-docs-rhel8 | none available fix in another branch | csaf_redhat | |
| red_hat_advanced_cluster_security_3:advanced-cluster-security/rhacs-main-rhel8 advanced-cluster-security/rhacs-main-rhel8 as a component of Red Hat Advanced Cluster Security 3 | affected | advanced-cluster-security/rhacs-main-rhel8 | no fix planned fix in another branch | csaf_redhat | |
| red_hat_advanced_cluster_security_3:advanced-cluster-security/rhacs-rhel8-operator advanced-cluster-security/rhacs-rhel8-operator as a component of Red Hat Advanced Cluster Security 3 | affected | advanced-cluster-security/rhacs-rhel8-operator | no fix planned fix in another branch | csaf_redhat | |
| red_hat_advanced_cluster_security_3:advanced-cluster-security/rhacs-roxctl-rhel8 advanced-cluster-security/rhacs-roxctl-rhel8 as a component of Red Hat Advanced Cluster Security 3 | affected | advanced-cluster-security/rhacs-roxctl-rhel8 | no fix planned fix in another branch | csaf_redhat | |
| red_hat_ceph_storage_4:cockpit-ceph-installer cockpit-ceph-installer as a component of Red Hat Ceph Storage 4 | affected | no version stated vendor label: cockpit-ceph-installer | no fix planned fix in another branch | csaf_redhat | |
| red_hat_ceph_storage_4:cockpit-ceph-installer.src cockpit-ceph-installer.src as a component of Red Hat Ceph Storage 4 | affected | no version stated vendor label: cockpit-ceph-installer.src | no fix planned fix in another branch | csaf_redhat | |
| red_hat_openshift_virtualization_4:container-native-virtualization/kubevirt-console-plugin container-native-virtualization/kubevirt-console-plugin as a component of Red Hat OpenShift Virtualization 4 | affected | no version stated vendor label: container-native-virtualization/kubevirt-console-plugin | none available fix in another branch | csaf_redhat | |
| red_hat_openshift_dev_spaces:devspaces-theia-endpoint-rhel8-container devspaces-theia-endpoint-rhel8-container as a component of Red Hat OpenShift Dev Spaces | affected | no version stated vendor label: devspaces-theia-endpoint-rhel8-container | no fix planned fix in another branch | csaf_redhat | |
| red_hat_openshift_dev_spaces:devspaces-theia-rhel8-container devspaces-theia-rhel8-container as a component of Red Hat OpenShift Dev Spaces | affected | no version stated vendor label: devspaces-theia-rhel8-container | no fix planned fix in another branch | csaf_redhat | |
| red_hat_openshift_dev_spaces:devspaces/code-rhel8 devspaces/code-rhel8 as a component of Red Hat OpenShift Dev Spaces | affected | devspaces/code-rhel8 | none available fix in another branch | csaf_redhat | |
| red_hat_openshift_dev_spaces:devspaces/dashboard-rhel8 devspaces/dashboard-rhel8 as a component of Red Hat OpenShift Dev Spaces | affected | devspaces/dashboard-rhel8 | none available fix in another branch | csaf_redhat | |
| red_hat_discovery_1:discovery-server-container discovery-server-container as a component of Red Hat Discovery 1 | affected | no version stated vendor label: discovery-server-container | none available fix in another branch | csaf_redhat | |
| migration_toolkit_for_virtualization:migration-toolkit-virtualization/mtv-ui-rhel8 migration-toolkit-virtualization/mtv-ui-rhel8 as a component of Migration Toolkit for Virtualization | affected | migration-toolkit-virtualization/mtv-ui-rhel8 | none available fix in another branch | csaf_redhat | |
| red_hat_fuse_7:nodejs-qs.src nodejs-qs.src as a component of Red Hat Fuse 7 | affected | no version stated vendor label: nodejs-qs.src | no fix planned fix in another branch | csaf_redhat | |
| red_hat_jboss_data_grid_7:nodejs-qs.src nodejs-qs.src as a component of Red Hat JBoss Data Grid 7 | affected | no version stated vendor label: nodejs-qs.src | out of support fix in another branch | csaf_redhat | |
| red_hat_openshift_data_foundation_4:nodejs.src nodejs.src as a component of Red Hat Openshift Data Foundation 4 | affected | no version stated vendor label: nodejs.src | none available fix in another branch | csaf_redhat | |
| red_hat_openshift_data_foundation_4:noobaa-core-container noobaa-core-container as a component of Red Hat Openshift Data Foundation 4 | affected | no version stated vendor label: noobaa-core-container | none available fix in another branch | csaf_redhat | |
| red_hat_openshift_container_storage_4:ocs4/mcg-core-rhel8 ocs4/mcg-core-rhel8 as a component of Red Hat Openshift Container Storage 4 | affected | ocs4/mcg-core-rhel8 | out of support fix in another branch | csaf_redhat | |
| red_hat_openshift_data_foundation_4:odf4/odf-console-rhel9 odf4/odf-console-rhel9 as a component of Red Hat Openshift Data Foundation 4 | affected | odf4/odf-console-rhel9 | no fix planned fix in another branch | csaf_redhat | |
| red_hat_openshift_data_foundation_4:odf4/odf-multicluster-console-rhel9 odf4/odf-multicluster-console-rhel9 as a component of Red Hat Openshift Data Foundation 4 | affected | odf4/odf-multicluster-console-rhel9 | no fix planned fix in another branch | csaf_redhat | |
| red_hat_openshift_gitops:openshift-gitops-1/argocd-rhel8 openshift-gitops-1/argocd-rhel8 as a component of Red Hat OpenShift GitOps | affected | openshift-gitops-1/argocd-rhel8 | none available fix in another branch | csaf_redhat | |
| openshift_service_mesh_2:openshift-service-mesh/kiali-rhel8 openshift-service-mesh/kiali-rhel8 as a component of OpenShift Service Mesh 2 | affected | openshift-service-mesh/kiali-rhel8 | no fix planned fix in another branch | csaf_redhat | |
| openshift_service_mesh_2.1:openshift-service-mesh/kiali-rhel8 openshift-service-mesh/kiali-rhel8 as a component of OpenShift Service Mesh 2.1 | affected | openshift-service-mesh/kiali-rhel8 | no fix planned fix in another branch | csaf_redhat | |
| red_hat_openshift_container_platform_3.11:openshift3/ose-console openshift3/ose-console as a component of Red Hat OpenShift Container Platform 3.11 | affected | openshift3/ose-console | out of support fix in another branch | csaf_redhat | |
| red_hat_openshift_container_platform_4:openshift4/ose-console openshift4/ose-console as a component of Red Hat OpenShift Container Platform 4 | affected | openshift4/ose-console | no fix planned fix in another branch | csaf_redhat | |
| red_hat_ansible_automation_platform_1.2:qs.src qs.src as a component of Red Hat Ansible Automation Platform 1.2 | affected | no version stated vendor label: qs.src | none available fix in another branch | csaf_redhat | |
| red_hat_build_of_apicurio_registry_2:qs.src qs.src as a component of Red Hat build of Apicurio Registry 2 | affected | no version stated vendor label: qs.src | none available fix in another branch | csaf_redhat | |
| red_hat_decision_manager_7:qs.src qs.src as a component of Red Hat Decision Manager 7 | affected | no version stated vendor label: qs.src | out of support fix in another branch | csaf_redhat | |
| red_hat_integration_camel_k_1:qs.src qs.src as a component of Red Hat Integration Camel K 1 | affected | no version stated vendor label: qs.src | none available fix in another branch | csaf_redhat | |
| red_hat_process_automation_7:qs.src qs.src as a component of Red Hat Process Automation 7 | affected | no version stated vendor label: qs.src | out of support fix in another branch | csaf_redhat | |
| red_hat_quay_3:quay/quay-rhel8 quay/quay-rhel8 as a component of Red Hat Quay 3 | affected | quay/quay-rhel8 | no fix planned fix in another branch | csaf_redhat | |
| red_hat_directory_server_11:redhat-ds:11/389-ds-base.src redhat-ds:11/389-ds-base.src as a component of Red Hat Directory Server 11 | affected | redhat-ds:11/389-ds-base.src | no fix planned fix in another branch | csaf_redhat | |
| .net_core_3.1_on_red_hat_enterprise_linux:rh-dotnet31-aspnetcore-runtime-3.1 rh-dotnet31-aspnetcore-runtime-3.1 as a component of .NET Core 3.1 on Red Hat Enterprise Linux | affected | no version stated vendor label: rh-dotnet31-aspnetcore-runtime-3.1 | out of support fix in another branch | csaf_redhat | |
| .net_core_3.1_on_red_hat_enterprise_linux:rh-dotnet31-aspnetcore-targeting-pack-3.1 rh-dotnet31-aspnetcore-targeting-pack-3.1 as a component of .NET Core 3.1 on Red Hat Enterprise Linux | affected | no version stated vendor label: rh-dotnet31-aspnetcore-targeting-pack-3.1 | out of support fix in another branch | csaf_redhat | |
| .net_core_3.1_on_red_hat_enterprise_linux:rh-dotnet31-dotnet rh-dotnet31-dotnet as a component of .NET Core 3.1 on Red Hat Enterprise Linux | affected | no version stated vendor label: rh-dotnet31-dotnet | out of support fix in another branch | csaf_redhat | |
| .net_core_3.1_on_red_hat_enterprise_linux:rh-dotnet31-dotnet-apphost-pack-3.1 rh-dotnet31-dotnet-apphost-pack-3.1 as a component of .NET Core 3.1 on Red Hat Enterprise Linux | affected | no version stated vendor label: rh-dotnet31-dotnet-apphost-pack-3.1 | out of support fix in another branch | csaf_redhat | |
| .net_core_3.1_on_red_hat_enterprise_linux:rh-dotnet31-dotnet-host rh-dotnet31-dotnet-host as a component of .NET Core 3.1 on Red Hat Enterprise Linux | affected | no version stated vendor label: rh-dotnet31-dotnet-host | out of support fix in another branch | csaf_redhat | |
| .net_core_3.1_on_red_hat_enterprise_linux:rh-dotnet31-dotnet-hostfxr-3.1 rh-dotnet31-dotnet-hostfxr-3.1 as a component of .NET Core 3.1 on Red Hat Enterprise Linux | affected | no version stated vendor label: rh-dotnet31-dotnet-hostfxr-3.1 | out of support fix in another branch | csaf_redhat | |
| .net_core_3.1_on_red_hat_enterprise_linux:rh-dotnet31-dotnet-runtime-3.1 rh-dotnet31-dotnet-runtime-3.1 as a component of .NET Core 3.1 on Red Hat Enterprise Linux | affected | no version stated vendor label: rh-dotnet31-dotnet-runtime-3.1 | out of support fix in another branch | csaf_redhat | |
| .net_core_3.1_on_red_hat_enterprise_linux:rh-dotnet31-dotnet-sdk-3.1 rh-dotnet31-dotnet-sdk-3.1 as a component of .NET Core 3.1 on Red Hat Enterprise Linux | affected | no version stated vendor label: rh-dotnet31-dotnet-sdk-3.1 | out of support fix in another branch | csaf_redhat | |
| .net_core_3.1_on_red_hat_enterprise_linux:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts as a component of .NET Core 3.1 on Red Hat Enterprise Linux | affected | no version stated vendor label: rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts | out of support fix in another branch | csaf_redhat | |
| .net_core_3.1_on_red_hat_enterprise_linux:rh-dotnet31-dotnet-targeting-pack-3.1 rh-dotnet31-dotnet-targeting-pack-3.1 as a component of .NET Core 3.1 on Red Hat Enterprise Linux | affected | no version stated vendor label: rh-dotnet31-dotnet-targeting-pack-3.1 | out of support fix in another branch | csaf_redhat | |
| .net_core_3.1_on_red_hat_enterprise_linux:rh-dotnet31-dotnet-templates-3.1 rh-dotnet31-dotnet-templates-3.1 as a component of .NET Core 3.1 on Red Hat Enterprise Linux | affected | no version stated vendor label: rh-dotnet31-dotnet-templates-3.1 | out of support fix in another branch | csaf_redhat | |
| .net_core_3.1_on_red_hat_enterprise_linux:rh-dotnet31-dotnet.src rh-dotnet31-dotnet.src as a component of .NET Core 3.1 on Red Hat Enterprise Linux | affected | no version stated vendor label: rh-dotnet31-dotnet.src | out of support fix in another branch | csaf_redhat | |
| .net_core_3.1_on_red_hat_enterprise_linux:rh-dotnet31-netstandard-targeting-pack-2.1 rh-dotnet31-netstandard-targeting-pack-2.1 as a component of .NET Core 3.1 on Red Hat Enterprise Linux | affected | no version stated vendor label: rh-dotnet31-netstandard-targeting-pack-2.1 | out of support fix in another branch | csaf_redhat | |
| red_hat_advanced_cluster_management_for_kubernetes_2:rhacm2/application-ui-rhel8 rhacm2/application-ui-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes 2 | affected | rhacm2/application-ui-rhel8 | no fix planned fix in another branch | csaf_redhat | |
| red_hat_advanced_cluster_management_for_kubernetes_2:rhacm2/console-api-rhel8 rhacm2/console-api-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes 2 | affected | rhacm2/console-api-rhel8 | no fix planned fix in another branch | csaf_redhat | |
| red_hat_advanced_cluster_management_for_kubernetes_2:rhacm2/console-rhel8 rhacm2/console-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes 2 | affected | rhacm2/console-rhel8 | no fix planned fix in another branch | csaf_redhat | |
| red_hat_advanced_cluster_management_for_kubernetes_2:rhacm2/grc-ui-api-rhel8 rhacm2/grc-ui-api-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes 2 | affected | rhacm2/grc-ui-api-rhel8 | no fix planned fix in another branch | csaf_redhat | |
| red_hat_advanced_cluster_management_for_kubernetes_2:rhacm2/grc-ui-rhel8 rhacm2/grc-ui-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes 2 | affected | rhacm2/grc-ui-rhel8 | no fix planned fix in another branch | csaf_redhat | |
| red_hat_advanced_cluster_management_for_kubernetes_2:rhacm2/search-api-rhel8 rhacm2/search-api-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes 2 | affected | rhacm2/search-api-rhel8 | none available fix in another branch | csaf_redhat | |
| red_hat_advanced_cluster_management_for_kubernetes_2:rhacm2/search-ui-rhel8 rhacm2/search-ui-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes 2 | affected | rhacm2/search-ui-rhel8 | no fix planned fix in another branch | csaf_redhat | |
| red_hat_satellite_6:satellite:el8/rubygem-rabl.src satellite:el8/rubygem-rabl.src as a component of Red Hat Satellite 6 | affected | satellite:el8/rubygem-rabl.src | no fix planned fix in another branch | csaf_redhat | |
| openshift_service_mesh_2.1:servicemesh-grafana servicemesh-grafana as a component of OpenShift Service Mesh 2.1 | affected | no version stated vendor label: servicemesh-grafana | no fix planned fix in another branch | csaf_redhat | |
| openshift_service_mesh_2.1:servicemesh-grafana.src servicemesh-grafana.src as a component of OpenShift Service Mesh 2.1 | affected | no version stated vendor label: servicemesh-grafana.src | no fix planned fix in another branch | csaf_redhat | |
| openshift_service_mesh_2.1:servicemesh-prometheus servicemesh-prometheus as a component of OpenShift Service Mesh 2.1 | affected | no version stated vendor label: servicemesh-prometheus | no fix planned fix in another branch | csaf_redhat | |
| openshift_service_mesh_2.1:servicemesh-prometheus.src servicemesh-prometheus.src as a component of OpenShift Service Mesh 2.1 | affected | no version stated vendor label: servicemesh-prometheus.src | no fix planned fix in another branch | csaf_redhat | |
| red_hat_satellite_6:tfm-rubygem-rabl tfm-rubygem-rabl as a component of Red Hat Satellite 6 | affected | no version stated vendor label: tfm-rubygem-rabl | no fix planned fix in another branch | csaf_redhat | |
| red_hat_satellite_6:tfm-rubygem-rabl.src tfm-rubygem-rabl.src as a component of Red Hat Satellite 6 | affected | no version stated vendor label: tfm-rubygem-rabl.src | no fix planned fix in another branch | csaf_redhat |
A claim with no version range is shown as written rather than expanded: a government catalog naming only a vendor and product is a real statement at zero granularity, and inventing bounds for it would put precision in the record that the source never offered.