Every applicability statement published about this vulnerability, kept as each source wrote it rather than merged into one verdict. Where sources disagree, both positions are shown.
A statement that names no version covers the whole product, which is not the same as your version falling inside a range. Orderings marked best effort come from schemes with no published comparison algorithm; exact ones follow a published specification.
Precedence decides which claim wins when two sources describe the same product over the same version range. It is a property of the source, not of the claim, and changing it re-ranks the data without re-reading a single document.
| Product | Status | Versions | Remediation | Source | |
|---|---|---|---|---|---|
| confidential_compute_attestation:build-of-trustee/trustee-rhel9 build-of-trustee/trustee-rhel9 as a component of Confidential Compute Attestation | affected | build-of-trustee/trustee-rhel9 | workaround fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:curl curl as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: curl | no fix planned fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_7:curl curl as a component of Red Hat Enterprise Linux 7 | affected | no version stated vendor label: curl | workaround fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:curl.src curl.src as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: curl.src | no fix planned fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_7:curl.src curl.src as a component of Red Hat Enterprise Linux 7 | affected | no version stated vendor label: curl.src | workaround fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:libcurl libcurl as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: libcurl | no fix planned fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_7:libcurl libcurl as a component of Red Hat Enterprise Linux 7 | affected | no version stated vendor label: libcurl | workaround fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:libcurl-devel libcurl-devel as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: libcurl-devel | no fix planned fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_7:libcurl-devel libcurl-devel as a component of Red Hat Enterprise Linux 7 | affected | no version stated vendor label: libcurl-devel | workaround fix in another branch | csaf_redhat | |
| red_hat_jboss_core_services:libcurl.so libcurl.so as a component of Red Hat JBoss Core Services | affected | no version stated vendor label: libcurl.so | no fix planned fix in another branch | csaf_redhat | |
| confidential_compute_attestation:openshift-sandboxed-containers/osc-podvm-payload-rhel9 openshift-sandboxed-containers/osc-podvm-payload-rhel9 as a component of Confidential Compute Attestation | affected | openshift-sandboxed-containers/osc-podvm-payload-rhel9 | workaround fix in another branch | csaf_redhat | |
| red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-8 openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4 | affected | openshift/ose-rhel-coreos-8 | workaround fix in another branch | csaf_redhat | |
| red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-9 openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4 | affected | openshift/ose-rhel-coreos-9 | workaround fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_ai_(rhel_ai)_3:rust.src rust.src as a component of Red Hat Enterprise Linux AI (RHEL AI) 3 | affected | no version stated vendor label: rust.src | workaround fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_10:snphost.src snphost.src as a component of Red Hat Enterprise Linux 10 | affected | no version stated vendor label: snphost.src | workaround fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_9:snphost.src snphost.src as a component of Red Hat Enterprise Linux 9 | affected | no version stated vendor label: snphost.src | workaround fix in another branch | csaf_redhat | |
| Red Hat Hardened Images:cargo-0:1.96.1-1.hum1@aarch64 cargo-0:1.96.1-1.hum1@aarch64 as a component of Red Hat Hardened Images | fixed | cargo-0:1.96.1-1.hum1@aarch64 | vendor fix → cargo-0:1.96.1-1.hum1@aarch64 (RHSA-2026:34975) | csaf_redhat | |
| Red Hat Hardened Images:cargo-0:1.96.1-1.hum1@x86_64 cargo-0:1.96.1-1.hum1@x86_64 as a component of Red Hat Hardened Images | fixed | cargo-0:1.96.1-1.hum1@x86_64 | vendor fix → cargo-0:1.96.1-1.hum1@x86_64 (RHSA-2026:34975) | csaf_redhat | |
| Red Hat Hardened Images:clippy-0:1.96.1-1.hum1@aarch64 clippy-0:1.96.1-1.hum1@aarch64 as a component of Red Hat Hardened Images | fixed | clippy-0:1.96.1-1.hum1@aarch64 | vendor fix → clippy-0:1.96.1-1.hum1@aarch64 (RHSA-2026:34975) | csaf_redhat | |
| Red Hat Hardened Images:clippy-0:1.96.1-1.hum1@x86_64 clippy-0:1.96.1-1.hum1@x86_64 as a component of Red Hat Hardened Images | fixed | clippy-0:1.96.1-1.hum1@x86_64 | vendor fix → clippy-0:1.96.1-1.hum1@x86_64 (RHSA-2026:34975) | csaf_redhat | |
| BaseOS-8.10.0.Z.MAIN.EUS:curl-0:7.61.1-34.el8_10.18.aarch64 curl-0:7.61.1-34.el8_10.18.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8) | fixed | curl-0:7.61.1-34.el8_10.18.aarch64 | vendor fix → curl-0:7.61.1-34.el8_10.18.aarch64 (RHSA-2026:92368) | csaf_redhat | |
| BaseOS-8.10.0.Z.MAIN.EUS:curl-0:7.61.1-34.el8_10.18.ppc64le curl-0:7.61.1-34.el8_10.18.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8) | fixed | curl-0:7.61.1-34.el8_10.18.ppc64le | vendor fix → curl-0:7.61.1-34.el8_10.18.ppc64le (RHSA-2026:92368) | csaf_redhat | |
| BaseOS-8.10.0.Z.MAIN.EUS:curl-0:7.61.1-34.el8_10.18.s390x curl-0:7.61.1-34.el8_10.18.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8) | fixed | curl-0:7.61.1-34.el8_10.18.s390x | vendor fix → curl-0:7.61.1-34.el8_10.18.s390x (RHSA-2026:92368) | csaf_redhat | |
| BaseOS-8.10.0.Z.MAIN.EUS:curl-0:7.61.1-34.el8_10.18.src curl-0:7.61.1-34.el8_10.18.src as a component of Red Hat Enterprise Linux BaseOS (v. 8) | fixed | curl-0:7.61.1-34.el8_10.18.src | vendor fix → curl-0:7.61.1-34.el8_10.18.src (RHSA-2026:92368) | csaf_redhat | |
| BaseOS-8.10.0.Z.MAIN.EUS:curl-0:7.61.1-34.el8_10.18.x86_64 curl-0:7.61.1-34.el8_10.18.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8) | fixed | curl-0:7.61.1-34.el8_10.18.x86_64 | vendor fix → curl-0:7.61.1-34.el8_10.18.x86_64 (RHSA-2026:92368) | csaf_redhat | |
| BaseOS-9.6.0.Z.EUS:curl-0:7.76.1-31.el9_6.4.aarch64 curl-0:7.76.1-31.el9_6.4.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6) | fixed | curl-0:7.76.1-31.el9_6.4.aarch64 | vendor fix → curl-0:7.76.1-31.el9_6.4.aarch64 (RHSA-2026:93454) | csaf_redhat | |
| BaseOS-9.6.0.Z.EUS:curl-0:7.76.1-31.el9_6.4.ppc64le curl-0:7.76.1-31.el9_6.4.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6) | fixed | curl-0:7.76.1-31.el9_6.4.ppc64le | vendor fix → curl-0:7.76.1-31.el9_6.4.ppc64le (RHSA-2026:93454) | csaf_redhat | |
| BaseOS-9.6.0.Z.EUS:curl-0:7.76.1-31.el9_6.4.s390x curl-0:7.76.1-31.el9_6.4.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6) | fixed | curl-0:7.76.1-31.el9_6.4.s390x | vendor fix → curl-0:7.76.1-31.el9_6.4.s390x (RHSA-2026:93454) | csaf_redhat | |
| BaseOS-9.6.0.Z.EUS:curl-0:7.76.1-31.el9_6.4.src curl-0:7.76.1-31.el9_6.4.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6) | fixed | curl-0:7.76.1-31.el9_6.4.src | vendor fix → curl-0:7.76.1-31.el9_6.4.src (RHSA-2026:93454) | csaf_redhat | |
| BaseOS-9.6.0.Z.EUS:curl-0:7.76.1-31.el9_6.4.x86_64 curl-0:7.76.1-31.el9_6.4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6) | fixed | curl-0:7.76.1-31.el9_6.4.x86_64 | vendor fix → curl-0:7.76.1-31.el9_6.4.x86_64 (RHSA-2026:93454) | csaf_redhat | |
| BaseOS-9.8.0.Z.MAIN.EUS:curl-0:7.76.1-40.el9_8.7.aarch64 curl-0:7.76.1-40.el9_8.7.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9) | fixed | curl-0:7.76.1-40.el9_8.7.aarch64 | vendor fix → curl-0:7.76.1-40.el9_8.7.aarch64 (RHSA-2026:69126) | csaf_redhat | |
| BaseOS-9.8.0.Z.MAIN.EUS:curl-0:7.76.1-40.el9_8.7.ppc64le curl-0:7.76.1-40.el9_8.7.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9) | fixed | curl-0:7.76.1-40.el9_8.7.ppc64le | vendor fix → curl-0:7.76.1-40.el9_8.7.ppc64le (RHSA-2026:69126) | csaf_redhat | |
| BaseOS-9.8.0.Z.MAIN.EUS:curl-0:7.76.1-40.el9_8.7.s390x curl-0:7.76.1-40.el9_8.7.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9) | fixed | curl-0:7.76.1-40.el9_8.7.s390x | vendor fix → curl-0:7.76.1-40.el9_8.7.s390x (RHSA-2026:69126) | csaf_redhat | |
| BaseOS-9.8.0.Z.MAIN.EUS:curl-0:7.76.1-40.el9_8.7.src curl-0:7.76.1-40.el9_8.7.src as a component of Red Hat Enterprise Linux BaseOS (v. 9) | fixed | curl-0:7.76.1-40.el9_8.7.src | vendor fix → curl-0:7.76.1-40.el9_8.7.src (RHSA-2026:69126) | csaf_redhat | |
| BaseOS-9.8.0.Z.MAIN.EUS:curl-0:7.76.1-40.el9_8.7.x86_64 curl-0:7.76.1-40.el9_8.7.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9) | fixed | curl-0:7.76.1-40.el9_8.7.x86_64 | vendor fix → curl-0:7.76.1-40.el9_8.7.x86_64 (RHSA-2026:69126) | csaf_redhat | |
| BaseOS-10.0.Z.E2S:curl-0:8.12.1-1.el10_0.10.aarch64 curl-0:8.12.1-1.el10_0.10.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0) | fixed | curl-0:8.12.1-1.el10_0.10.aarch64 | vendor fix → curl-0:8.12.1-1.el10_0.10.aarch64 (RHSA-2026:72506) | csaf_redhat | |
| BaseOS-10.0.Z.E2S:curl-0:8.12.1-1.el10_0.10.ppc64le curl-0:8.12.1-1.el10_0.10.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0) | fixed | curl-0:8.12.1-1.el10_0.10.ppc64le | vendor fix → curl-0:8.12.1-1.el10_0.10.ppc64le (RHSA-2026:72506) | csaf_redhat | |
| BaseOS-10.0.Z.E2S:curl-0:8.12.1-1.el10_0.10.s390x curl-0:8.12.1-1.el10_0.10.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0) | fixed | curl-0:8.12.1-1.el10_0.10.s390x | vendor fix → curl-0:8.12.1-1.el10_0.10.s390x (RHSA-2026:72506) | csaf_redhat | |
| BaseOS-10.0.Z.E2S:curl-0:8.12.1-1.el10_0.10.src curl-0:8.12.1-1.el10_0.10.src as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0) | fixed | curl-0:8.12.1-1.el10_0.10.src | vendor fix → curl-0:8.12.1-1.el10_0.10.src (RHSA-2026:72506) | csaf_redhat | |
| BaseOS-10.0.Z.E2S:curl-0:8.12.1-1.el10_0.10.x86_64 curl-0:8.12.1-1.el10_0.10.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0) | fixed | curl-0:8.12.1-1.el10_0.10.x86_64 | vendor fix → curl-0:8.12.1-1.el10_0.10.x86_64 (RHSA-2026:72506) | csaf_redhat | |
| BaseOS-10.2.Z:curl-0:8.12.1-4.el10_2.4.aarch64 curl-0:8.12.1-4.el10_2.4.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10) | fixed | curl-0:8.12.1-4.el10_2.4.aarch64 | vendor fix → curl-0:8.12.1-4.el10_2.4.aarch64 (RHSA-2026:55432) | csaf_redhat | |
| BaseOS-10.2.Z:curl-0:8.12.1-4.el10_2.4.ppc64le curl-0:8.12.1-4.el10_2.4.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10) | fixed | curl-0:8.12.1-4.el10_2.4.ppc64le | vendor fix → curl-0:8.12.1-4.el10_2.4.ppc64le (RHSA-2026:55432) | csaf_redhat | |
| BaseOS-10.2.Z:curl-0:8.12.1-4.el10_2.4.s390x curl-0:8.12.1-4.el10_2.4.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10) | fixed | curl-0:8.12.1-4.el10_2.4.s390x | vendor fix → curl-0:8.12.1-4.el10_2.4.s390x (RHSA-2026:55432) | csaf_redhat | |
| BaseOS-10.2.Z:curl-0:8.12.1-4.el10_2.4.src curl-0:8.12.1-4.el10_2.4.src as a component of Red Hat Enterprise Linux BaseOS (v. 10) | fixed | curl-0:8.12.1-4.el10_2.4.src | vendor fix → curl-0:8.12.1-4.el10_2.4.src (RHSA-2026:55432) | csaf_redhat | |
| BaseOS-10.2.Z:curl-0:8.12.1-4.el10_2.4.x86_64 curl-0:8.12.1-4.el10_2.4.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10) | fixed | curl-0:8.12.1-4.el10_2.4.x86_64 | vendor fix → curl-0:8.12.1-4.el10_2.4.x86_64 (RHSA-2026:55432) | csaf_redhat | |
| Red Hat Hardened Images:curl-0:8.21.0-0.1.hum1@aarch64 curl-0:8.21.0-0.1.hum1@aarch64 as a component of Red Hat Hardened Images | fixed | curl-0:8.21.0-0.1.hum1@aarch64 | vendor fix → curl-0:8.21.0-0.1.hum1@aarch64 (RHSA-2026:29017) | csaf_redhat | |
| Red Hat Hardened Images:curl-0:8.21.0-0.1.hum1@src curl-0:8.21.0-0.1.hum1@src as a component of Red Hat Hardened Images | fixed | curl-0:8.21.0-0.1.hum1@src | vendor fix → curl-0:8.21.0-0.1.hum1@src (RHSA-2026:29017) | csaf_redhat | |
| Red Hat Hardened Images:curl-0:8.21.0-0.1.hum1@x86_64 curl-0:8.21.0-0.1.hum1@x86_64 as a component of Red Hat Hardened Images | fixed | curl-0:8.21.0-0.1.hum1@x86_64 | vendor fix → curl-0:8.21.0-0.1.hum1@x86_64 (RHSA-2026:29017) | csaf_redhat | |
| BaseOS-8.10.0.Z.MAIN.EUS:curl-debuginfo-0:7.61.1-34.el8_10.18.aarch64 curl-debuginfo-0:7.61.1-34.el8_10.18.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8) | fixed | curl-debuginfo-0:7.61.1-34.el8_10.18.aarch64 | vendor fix → curl-debuginfo-0:7.61.1-34.el8_10.18.aarch64 (RHSA-2026:92368) | csaf_redhat | |
| BaseOS-8.10.0.Z.MAIN.EUS:curl-debuginfo-0:7.61.1-34.el8_10.18.i686 curl-debuginfo-0:7.61.1-34.el8_10.18.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8) | fixed | curl-debuginfo-0:7.61.1-34.el8_10.18.i686 | vendor fix → curl-debuginfo-0:7.61.1-34.el8_10.18.i686 (RHSA-2026:92368) | csaf_redhat | |
| BaseOS-8.10.0.Z.MAIN.EUS:curl-debuginfo-0:7.61.1-34.el8_10.18.ppc64le curl-debuginfo-0:7.61.1-34.el8_10.18.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8) | fixed | curl-debuginfo-0:7.61.1-34.el8_10.18.ppc64le | vendor fix → curl-debuginfo-0:7.61.1-34.el8_10.18.ppc64le (RHSA-2026:92368) | csaf_redhat | |
| BaseOS-8.10.0.Z.MAIN.EUS:curl-debuginfo-0:7.61.1-34.el8_10.18.s390x curl-debuginfo-0:7.61.1-34.el8_10.18.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8) | fixed | curl-debuginfo-0:7.61.1-34.el8_10.18.s390x | vendor fix → curl-debuginfo-0:7.61.1-34.el8_10.18.s390x (RHSA-2026:92368) | csaf_redhat | |
| BaseOS-8.10.0.Z.MAIN.EUS:curl-debuginfo-0:7.61.1-34.el8_10.18.x86_64 curl-debuginfo-0:7.61.1-34.el8_10.18.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8) | fixed | curl-debuginfo-0:7.61.1-34.el8_10.18.x86_64 | vendor fix → curl-debuginfo-0:7.61.1-34.el8_10.18.x86_64 (RHSA-2026:92368) | csaf_redhat | |
| AppStream-9.6.0.Z.EUS:curl-debuginfo-0:7.76.1-31.el9_6.4.aarch64 curl-debuginfo-0:7.76.1-31.el9_6.4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6) | fixed | curl-debuginfo-0:7.76.1-31.el9_6.4.aarch64 | vendor fix → curl-debuginfo-0:7.76.1-31.el9_6.4.aarch64 (RHSA-2026:93454) | csaf_redhat | |
| BaseOS-9.6.0.Z.EUS:curl-debuginfo-0:7.76.1-31.el9_6.4.aarch64 curl-debuginfo-0:7.76.1-31.el9_6.4.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6) | fixed | curl-debuginfo-0:7.76.1-31.el9_6.4.aarch64 | vendor fix → curl-debuginfo-0:7.76.1-31.el9_6.4.aarch64 (RHSA-2026:93454) | csaf_redhat | |
| AppStream-9.6.0.Z.EUS:curl-debuginfo-0:7.76.1-31.el9_6.4.i686 curl-debuginfo-0:7.76.1-31.el9_6.4.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6) | fixed | curl-debuginfo-0:7.76.1-31.el9_6.4.i686 | vendor fix → curl-debuginfo-0:7.76.1-31.el9_6.4.i686 (RHSA-2026:93454) | csaf_redhat | |
| BaseOS-9.6.0.Z.EUS:curl-debuginfo-0:7.76.1-31.el9_6.4.i686 curl-debuginfo-0:7.76.1-31.el9_6.4.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6) | fixed | curl-debuginfo-0:7.76.1-31.el9_6.4.i686 | vendor fix → curl-debuginfo-0:7.76.1-31.el9_6.4.i686 (RHSA-2026:93454) | csaf_redhat | |
| AppStream-9.6.0.Z.EUS:curl-debuginfo-0:7.76.1-31.el9_6.4.ppc64le curl-debuginfo-0:7.76.1-31.el9_6.4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6) | fixed | curl-debuginfo-0:7.76.1-31.el9_6.4.ppc64le | vendor fix → curl-debuginfo-0:7.76.1-31.el9_6.4.ppc64le (RHSA-2026:93454) | csaf_redhat | |
| BaseOS-9.6.0.Z.EUS:curl-debuginfo-0:7.76.1-31.el9_6.4.ppc64le curl-debuginfo-0:7.76.1-31.el9_6.4.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6) | fixed | curl-debuginfo-0:7.76.1-31.el9_6.4.ppc64le | vendor fix → curl-debuginfo-0:7.76.1-31.el9_6.4.ppc64le (RHSA-2026:93454) | csaf_redhat | |
| AppStream-9.6.0.Z.EUS:curl-debuginfo-0:7.76.1-31.el9_6.4.s390x curl-debuginfo-0:7.76.1-31.el9_6.4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6) | fixed | curl-debuginfo-0:7.76.1-31.el9_6.4.s390x | vendor fix → curl-debuginfo-0:7.76.1-31.el9_6.4.s390x (RHSA-2026:93454) | csaf_redhat |
A claim with no version range is shown as written rather than expanded: a government catalog naming only a vendor and product is a real statement at zero granularity, and inventing bounds for it would put precision in the record that the source never offered.