Every applicability statement published about this vulnerability, kept as each source wrote it rather than merged into one verdict. Where sources disagree, both positions are shown.
A statement that names no version covers the whole product, which is not the same as your version falling inside a range. Orderings marked best effort come from schemes with no published comparison algorithm; exact ones follow a published specification.
Precedence decides which claim wins when two sources describe the same product over the same version range. It is a property of the source, not of the claim, and changing it re-ranks the data without re-reading a single document.
| Product | Status | Versions | Remediation | Source | |
|---|---|---|---|---|---|
| exploit_intelligence:exploit-intelligence-tech-preview/agent-client-rhel9 exploit-intelligence-tech-preview/agent-client-rhel9 as a component of Exploit Intelligence | affected | exploit-intelligence-tech-preview/agent-client-rhel9 | workaround fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:lemon lemon as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: lemon | out of support fix in another branch | csaf_redhat | |
| red_hat_openshift_container_platform_5:openshift/ose-rhel-coreos-9 openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 5 | affected | openshift/ose-rhel-coreos-9 | workaround fix in another branch | csaf_redhat | |
| red_hat_ai_inference_server:rhaii/vllm-neuron-rhel9 rhaii/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server | affected | rhaii/vllm-neuron-rhel9 | no fix planned fix in another branch | csaf_redhat | |
| red_hat_ai_inference_server:rhaii/vllm-tpu-rhel9 rhaii/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server | affected | rhaii/vllm-tpu-rhel9 | no fix planned fix in another branch | csaf_redhat | |
| red_hat_ai_inference_server:rhaiis/vllm-cpu-rhel9 rhaiis/vllm-cpu-rhel9 as a component of Red Hat AI Inference Server | affected | rhaiis/vllm-cpu-rhel9 | no fix planned fix in another branch | csaf_redhat | |
| red_hat_ai_inference_server:rhaiis/vllm-neuron-rhel9 rhaiis/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server | affected | rhaiis/vllm-neuron-rhel9 | no fix planned fix in another branch | csaf_redhat | |
| red_hat_ai_inference_server:rhaiis/vllm-tpu-rhel9 rhaiis/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server | affected | rhaiis/vllm-tpu-rhel9 | no fix planned fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-gaudi-rhel9 rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3 | affected | rhelai3/bootc-gaudi-rhel9 | no fix planned fix in another branch | csaf_redhat | |
| red_hat_openshift_ai_(rhoai):rhoai/odh-ai-gateway-payload-processing-rhel9 rhoai/odh-ai-gateway-payload-processing-rhel9 as a component of Red Hat OpenShift AI (RHOAI) | affected | rhoai/odh-ai-gateway-payload-processing-rhel9 | workaround fix in another branch | csaf_redhat | |
| red_hat_openshift_ai_(rhoai):rhoai/odh-data-science-pipelines-argo-argoexec-rhel9 rhoai/odh-data-science-pipelines-argo-argoexec-rhel9 as a component of Red Hat OpenShift AI (RHOAI) | affected | rhoai/odh-data-science-pipelines-argo-argoexec-rhel9 | workaround fix in another branch | csaf_redhat | |
| red_hat_openshift_ai_(rhoai):rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9 rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9 as a component of Red Hat OpenShift AI (RHOAI) | affected | rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9 | workaround fix in another branch | csaf_redhat | |
| red_hat_openshift_ai_(rhoai):rhoai/odh-data-science-pipelines-operator-controller-rhel9 rhoai/odh-data-science-pipelines-operator-controller-rhel9 as a component of Red Hat OpenShift AI (RHOAI) | affected | rhoai/odh-data-science-pipelines-operator-controller-rhel9 | workaround fix in another branch | csaf_redhat | |
| red_hat_openshift_ai_(rhoai):rhoai/odh-kueue-controller-rhel9 rhoai/odh-kueue-controller-rhel9 as a component of Red Hat OpenShift AI (RHOAI) | affected | rhoai/odh-kueue-controller-rhel9 | workaround fix in another branch | csaf_redhat | |
| red_hat_openshift_ai_(rhoai):rhoai/odh-llm-d-kv-cache-rhel9 rhoai/odh-llm-d-kv-cache-rhel9 as a component of Red Hat OpenShift AI (RHOAI) | affected | rhoai/odh-llm-d-kv-cache-rhel9 | workaround fix in another branch | csaf_redhat | |
| red_hat_openshift_ai_(rhoai):rhoai/odh-ml-pipelines-api-server-v2-rhel9 rhoai/odh-ml-pipelines-api-server-v2-rhel9 as a component of Red Hat OpenShift AI (RHOAI) | affected | rhoai/odh-ml-pipelines-api-server-v2-rhel9 | workaround fix in another branch | csaf_redhat | |
| red_hat_openshift_ai_(rhoai):rhoai/odh-ml-pipelines-driver-rhel9 rhoai/odh-ml-pipelines-driver-rhel9 as a component of Red Hat OpenShift AI (RHOAI) | affected | rhoai/odh-ml-pipelines-driver-rhel9 | workaround fix in another branch | csaf_redhat | |
| red_hat_openshift_ai_(rhoai):rhoai/odh-ml-pipelines-launcher-rhel9 rhoai/odh-ml-pipelines-launcher-rhel9 as a component of Red Hat OpenShift AI (RHOAI) | affected | rhoai/odh-ml-pipelines-launcher-rhel9 | workaround fix in another branch | csaf_redhat | |
| red_hat_openshift_ai_(rhoai):rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9 rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9 as a component of Red Hat OpenShift AI (RHOAI) | affected | rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9 | workaround fix in another branch | csaf_redhat | |
| red_hat_openshift_ai_(rhoai):rhoai/odh-ml-pipelines-runtime-generic-rhel9 rhoai/odh-ml-pipelines-runtime-generic-rhel9 as a component of Red Hat OpenShift AI (RHOAI) | affected | rhoai/odh-ml-pipelines-runtime-generic-rhel9 | workaround fix in another branch | csaf_redhat | |
| red_hat_openshift_ai_(rhoai):rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9 rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9 as a component of Red Hat OpenShift AI (RHOAI) | affected | rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9 | workaround fix in another branch | csaf_redhat | |
| red_hat_openshift_ai_(rhoai):rhoai/odh-pipelines-components-rhel9 rhoai/odh-pipelines-components-rhel9 as a component of Red Hat OpenShift AI (RHOAI) | affected | rhoai/odh-pipelines-components-rhel9 | workaround fix in another branch | csaf_redhat | |
| red_hat_openshift_ai_(rhoai):rhoai/odh-rhaii-validator-tools-rhel9 rhoai/odh-rhaii-validator-tools-rhel9 as a component of Red Hat OpenShift AI (RHOAI) | affected | rhoai/odh-rhaii-validator-tools-rhel9 | workaround fix in another branch | csaf_redhat | |
| red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cpu-torch291-py312-rhel9 rhoai/odh-th06-cpu-torch291-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI) | affected | rhoai/odh-th06-cpu-torch291-py312-rhel9 | workaround fix in another branch | csaf_redhat | |
| red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cuda130-torch291-py312-rhel9 rhoai/odh-th06-cuda130-torch291-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI) | affected | rhoai/odh-th06-cuda130-torch291-py312-rhel9 | workaround fix in another branch | csaf_redhat | |
| red_hat_openshift_ai_(rhoai):rhoai/odh-vllm-gaudi-rhel9 rhoai/odh-vllm-gaudi-rhel9 as a component of Red Hat OpenShift AI (RHOAI) | affected | rhoai/odh-vllm-gaudi-rhel9 | no fix planned fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_ai_(rhel_ai)_3:rust.src rust.src as a component of Red Hat Enterprise Linux AI (RHEL AI) 3 | affected | no version stated vendor label: rust.src | workaround fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:sqlite sqlite as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: sqlite | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:sqlite-devel sqlite-devel as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: sqlite-devel | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:sqlite-doc sqlite-doc as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: sqlite-doc | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:sqlite-tcl sqlite-tcl as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: sqlite-tcl | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:sqlite.src sqlite.src as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: sqlite.src | out of support fix in another branch | csaf_redhat | |
| AppStream-8.4.0.Z.AUS:lemon-0:3.26.0-13.el8_4.2.x86_64 lemon-0:3.26.0-13.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4) | fixed | lemon-0:3.26.0-13.el8_4.2.x86_64 | vendor fix → lemon-0:3.26.0-13.el8_4.2.x86_64 (RHSA-2026:59024) | csaf_redhat | |
| AppStream-8.4.0.Z.EUS.EXTENSION:lemon-0:3.26.0-13.el8_4.2.x86_64 lemon-0:3.26.0-13.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) | fixed | lemon-0:3.26.0-13.el8_4.2.x86_64 | vendor fix → lemon-0:3.26.0-13.el8_4.2.x86_64 (RHSA-2026:59024) | csaf_redhat | |
| AppStream-8.6.0.Z.AUS:lemon-0:3.26.0-16.el8_6.4.x86_64 lemon-0:3.26.0-16.el8_6.4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6) | fixed | lemon-0:3.26.0-16.el8_6.4.x86_64 | vendor fix → lemon-0:3.26.0-16.el8_6.4.x86_64 (RHSA-2026:59020) | csaf_redhat | |
| AppStream-8.6.0.Z.EUS.EXTENSION:lemon-0:3.26.0-16.el8_6.4.x86_64 lemon-0:3.26.0-16.el8_6.4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) | fixed | lemon-0:3.26.0-16.el8_6.4.x86_64 | vendor fix → lemon-0:3.26.0-16.el8_6.4.x86_64 (RHSA-2026:59020) | csaf_redhat | |
| AppStream-8.8.0.Z.E4S:lemon-0:3.26.0-18.el8_8.3.ppc64le lemon-0:3.26.0-18.el8_8.3.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8) | fixed | lemon-0:3.26.0-18.el8_8.3.ppc64le | vendor fix → lemon-0:3.26.0-18.el8_8.3.ppc64le (RHSA-2026:58939) | csaf_redhat | |
| AppStream-8.8.0.Z.E4S:lemon-0:3.26.0-18.el8_8.3.x86_64 lemon-0:3.26.0-18.el8_8.3.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8) | fixed | lemon-0:3.26.0-18.el8_8.3.x86_64 | vendor fix → lemon-0:3.26.0-18.el8_8.3.x86_64 (RHSA-2026:58939) | csaf_redhat | |
| AppStream-8.8.0.Z.TUS:lemon-0:3.26.0-18.el8_8.3.x86_64 lemon-0:3.26.0-18.el8_8.3.x86_64 as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8) | fixed | lemon-0:3.26.0-18.el8_8.3.x86_64 | vendor fix → lemon-0:3.26.0-18.el8_8.3.x86_64 (RHSA-2026:58939) | csaf_redhat | |
| AppStream-8.10.0.Z.MAIN.EUS:lemon-0:3.26.0-21.el8_10.aarch64 lemon-0:3.26.0-21.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8) | fixed | lemon-0:3.26.0-21.el8_10.aarch64 | vendor fix → lemon-0:3.26.0-21.el8_10.aarch64 (RHSA-2026:58938) | csaf_redhat | |
| AppStream-8.10.0.Z.MAIN.EUS:lemon-0:3.26.0-21.el8_10.ppc64le lemon-0:3.26.0-21.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8) | fixed | lemon-0:3.26.0-21.el8_10.ppc64le | vendor fix → lemon-0:3.26.0-21.el8_10.ppc64le (RHSA-2026:58938) | csaf_redhat | |
| AppStream-8.10.0.Z.MAIN.EUS:lemon-0:3.26.0-21.el8_10.s390x lemon-0:3.26.0-21.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8) | fixed | lemon-0:3.26.0-21.el8_10.s390x | vendor fix → lemon-0:3.26.0-21.el8_10.s390x (RHSA-2026:58938) | csaf_redhat | |
| AppStream-8.10.0.Z.MAIN.EUS:lemon-0:3.26.0-21.el8_10.x86_64 lemon-0:3.26.0-21.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8) | fixed | lemon-0:3.26.0-21.el8_10.x86_64 | vendor fix → lemon-0:3.26.0-21.el8_10.x86_64 (RHSA-2026:58938) | csaf_redhat | |
| Red Hat Hardened Images:lemon-0:3.53.4-0.1.hum1@aarch64 lemon-0:3.53.4-0.1.hum1@aarch64 as a component of Red Hat Hardened Images | fixed | lemon-0:3.53.4-0.1.hum1@aarch64 | vendor fix → lemon-0:3.53.4-0.1.hum1@aarch64 (RHSA-2026:45779) | csaf_redhat | |
| Red Hat Hardened Images:lemon-0:3.53.4-0.1.hum1@x86_64 lemon-0:3.53.4-0.1.hum1@x86_64 as a component of Red Hat Hardened Images | fixed | lemon-0:3.53.4-0.1.hum1@x86_64 | vendor fix → lemon-0:3.53.4-0.1.hum1@x86_64 (RHSA-2026:45779) | csaf_redhat | |
| BaseOS-8.4.0.Z.AUS:lemon-debuginfo-0:3.26.0-13.el8_4.2.i686 lemon-debuginfo-0:3.26.0-13.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4) | fixed | lemon-debuginfo-0:3.26.0-13.el8_4.2.i686 | vendor fix → lemon-debuginfo-0:3.26.0-13.el8_4.2.i686 (RHSA-2026:59024) | csaf_redhat | |
| BaseOS-8.4.0.Z.EUS.EXTENSION:lemon-debuginfo-0:3.26.0-13.el8_4.2.i686 lemon-debuginfo-0:3.26.0-13.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) | fixed | lemon-debuginfo-0:3.26.0-13.el8_4.2.i686 | vendor fix → lemon-debuginfo-0:3.26.0-13.el8_4.2.i686 (RHSA-2026:59024) | csaf_redhat | |
| AppStream-8.4.0.Z.AUS:lemon-debuginfo-0:3.26.0-13.el8_4.2.x86_64 lemon-debuginfo-0:3.26.0-13.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4) | fixed | lemon-debuginfo-0:3.26.0-13.el8_4.2.x86_64 | vendor fix → lemon-debuginfo-0:3.26.0-13.el8_4.2.x86_64 (RHSA-2026:59024) | csaf_redhat | |
| AppStream-8.4.0.Z.EUS.EXTENSION:lemon-debuginfo-0:3.26.0-13.el8_4.2.x86_64 lemon-debuginfo-0:3.26.0-13.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) | fixed | lemon-debuginfo-0:3.26.0-13.el8_4.2.x86_64 | vendor fix → lemon-debuginfo-0:3.26.0-13.el8_4.2.x86_64 (RHSA-2026:59024) | csaf_redhat | |
| BaseOS-8.4.0.Z.AUS:lemon-debuginfo-0:3.26.0-13.el8_4.2.x86_64 lemon-debuginfo-0:3.26.0-13.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4) | fixed | lemon-debuginfo-0:3.26.0-13.el8_4.2.x86_64 | vendor fix → lemon-debuginfo-0:3.26.0-13.el8_4.2.x86_64 (RHSA-2026:59024) | csaf_redhat | |
| BaseOS-8.4.0.Z.EUS.EXTENSION:lemon-debuginfo-0:3.26.0-13.el8_4.2.x86_64 lemon-debuginfo-0:3.26.0-13.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) | fixed | lemon-debuginfo-0:3.26.0-13.el8_4.2.x86_64 | vendor fix → lemon-debuginfo-0:3.26.0-13.el8_4.2.x86_64 (RHSA-2026:59024) | csaf_redhat | |
| BaseOS-8.6.0.Z.AUS:lemon-debuginfo-0:3.26.0-16.el8_6.4.i686 lemon-debuginfo-0:3.26.0-16.el8_6.4.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6) | fixed | lemon-debuginfo-0:3.26.0-16.el8_6.4.i686 | vendor fix → lemon-debuginfo-0:3.26.0-16.el8_6.4.i686 (RHSA-2026:59020) | csaf_redhat | |
| BaseOS-8.6.0.Z.EUS.EXTENSION:lemon-debuginfo-0:3.26.0-16.el8_6.4.i686 lemon-debuginfo-0:3.26.0-16.el8_6.4.i686 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) | fixed | lemon-debuginfo-0:3.26.0-16.el8_6.4.i686 | vendor fix → lemon-debuginfo-0:3.26.0-16.el8_6.4.i686 (RHSA-2026:59020) | csaf_redhat | |
| AppStream-8.6.0.Z.AUS:lemon-debuginfo-0:3.26.0-16.el8_6.4.x86_64 lemon-debuginfo-0:3.26.0-16.el8_6.4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6) | fixed | lemon-debuginfo-0:3.26.0-16.el8_6.4.x86_64 | vendor fix → lemon-debuginfo-0:3.26.0-16.el8_6.4.x86_64 (RHSA-2026:59020) | csaf_redhat | |
| AppStream-8.6.0.Z.EUS.EXTENSION:lemon-debuginfo-0:3.26.0-16.el8_6.4.x86_64 lemon-debuginfo-0:3.26.0-16.el8_6.4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) | fixed | lemon-debuginfo-0:3.26.0-16.el8_6.4.x86_64 | vendor fix → lemon-debuginfo-0:3.26.0-16.el8_6.4.x86_64 (RHSA-2026:59020) | csaf_redhat | |
| BaseOS-8.6.0.Z.AUS:lemon-debuginfo-0:3.26.0-16.el8_6.4.x86_64 lemon-debuginfo-0:3.26.0-16.el8_6.4.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6) | fixed | lemon-debuginfo-0:3.26.0-16.el8_6.4.x86_64 | vendor fix → lemon-debuginfo-0:3.26.0-16.el8_6.4.x86_64 (RHSA-2026:59020) | csaf_redhat | |
| BaseOS-8.6.0.Z.EUS.EXTENSION:lemon-debuginfo-0:3.26.0-16.el8_6.4.x86_64 lemon-debuginfo-0:3.26.0-16.el8_6.4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) | fixed | lemon-debuginfo-0:3.26.0-16.el8_6.4.x86_64 | vendor fix → lemon-debuginfo-0:3.26.0-16.el8_6.4.x86_64 (RHSA-2026:59020) | csaf_redhat | |
| BaseOS-8.8.0.Z.E4S:lemon-debuginfo-0:3.26.0-18.el8_8.3.i686 lemon-debuginfo-0:3.26.0-18.el8_8.3.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8) | fixed | lemon-debuginfo-0:3.26.0-18.el8_8.3.i686 | vendor fix → lemon-debuginfo-0:3.26.0-18.el8_8.3.i686 (RHSA-2026:58939) | csaf_redhat | |
| BaseOS-8.8.0.Z.TUS:lemon-debuginfo-0:3.26.0-18.el8_8.3.i686 lemon-debuginfo-0:3.26.0-18.el8_8.3.i686 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8) | fixed | lemon-debuginfo-0:3.26.0-18.el8_8.3.i686 | vendor fix → lemon-debuginfo-0:3.26.0-18.el8_8.3.i686 (RHSA-2026:58939) | csaf_redhat | |
| AppStream-8.8.0.Z.E4S:lemon-debuginfo-0:3.26.0-18.el8_8.3.ppc64le lemon-debuginfo-0:3.26.0-18.el8_8.3.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8) | fixed | lemon-debuginfo-0:3.26.0-18.el8_8.3.ppc64le | vendor fix → lemon-debuginfo-0:3.26.0-18.el8_8.3.ppc64le (RHSA-2026:58939) | csaf_redhat |
A claim with no version range is shown as written rather than expanded: a government catalog naming only a vendor and product is a real statement at zero granularity, and inventing bounds for it would put precision in the record that the source never offered.