{"schema":"vulnpedia.research/1","cve":"CVE-2026-6653","references":[{"url":"https://bugs.launchpad.net/ubuntu/+source/libxml2/+bug/2141260","tags":["issue-tracking","Exploit","Issue Tracking","Third Party Advisory","vendor-reference"],"source":"mitre","sourceId":"canonical","modified":"2026-06-22T12:40:31.424Z","origins":[{"source":"mitre","sourceId":"canonical","modified":"2026-06-22T12:40:31.424Z","url":"https://bugs.launchpad.net/ubuntu/+source/libxml2/+bug/2141260"},{"source":"nvd","sourceId":"CVE-2026-6653","modified":"2026-10-25T23:10:00.167","url":"https://bugs.launchpad.net/ubuntu/+source/libxml2/+bug/2141260"},{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://bugs.launchpad.net/ubuntu/+source/libxml2/+bug/2141260"}]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/work_items/1058","tags":["issue-tracking","Exploit","Issue Tracking","Patch","vendor-reference"],"source":"mitre","sourceId":"canonical","modified":"2026-06-22T12:40:31.424Z","origins":[{"source":"mitre","sourceId":"canonical","modified":"2026-06-22T12:40:31.424Z","url":"https://gitlab.gnome.org/GNOME/libxml2/-/work_items/1058"},{"source":"nvd","sourceId":"CVE-2026-6653","modified":"2026-10-25T23:10:00.167","url":"https://gitlab.gnome.org/GNOME/libxml2/-/work_items/1058"},{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://gitlab.gnome.org/GNOME/libxml2/-/work_items/1058"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6653","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-6653"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2491354","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2491354"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6653","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-6653"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6653","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6653"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:69655","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://access.redhat.com/errata/RHSA-2026:69655"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:61247","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://access.redhat.com/errata/RHSA-2026:61247"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:82336","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://access.redhat.com/errata/RHSA-2026:82336"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:82304","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://access.redhat.com/errata/RHSA-2026:82304"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:82347","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://access.redhat.com/errata/RHSA-2026:82347"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:72395","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://access.redhat.com/errata/RHSA-2026:72395"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:72476","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://access.redhat.com/errata/RHSA-2026:72476"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:72394","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://access.redhat.com/errata/RHSA-2026:72394"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:66018","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://access.redhat.com/errata/RHSA-2026:66018"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:82888","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://access.redhat.com/errata/RHSA-2026:82888"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:82322","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://access.redhat.com/errata/RHSA-2026:82322"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:82354","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://access.redhat.com/errata/RHSA-2026:82354"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:82857","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://access.redhat.com/errata/RHSA-2026:82857"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:82372","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://access.redhat.com/errata/RHSA-2026:82372"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:72475","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://access.redhat.com/errata/RHSA-2026:72475"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:72399","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://access.redhat.com/errata/RHSA-2026:72399"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:72502","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://access.redhat.com/errata/RHSA-2026:72502"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:72470","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://access.redhat.com/errata/RHSA-2026:72470"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:61783","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://access.redhat.com/errata/RHSA-2026:61783"}]},{"source":"euvd","sourceId":"EUVD-2026-38232","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-38232","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-38232","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-38232"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:libxml2-debuginfo-0:2.9.7-21.el8_10.8.aarch64","product":"libxml2-debuginfo-0:2.9.7-21.el8_10.8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:69655"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.\n\nUpdating to a fixed version of libxml2 (2.11.0 or later upstream, or a future RHEL errata) will fully resolve this issue."}],"purl":"pkg:rpm/redhat/libxml2-debuginfo@2.9.7-21.el8_10.8?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json"}]},{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:libxml2-devel-0:2.9.7-21.el8_10.8.ppc64le","product":"libxml2-devel-0:2.9.7-21.el8_10.8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:69655"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.\n\nUpdating to a fixed version of libxml2 (2.11.0 or later upstream, or a future RHEL errata) will fully resolve this issue."}],"purl":"pkg:rpm/redhat/libxml2-devel@2.9.7-21.el8_10.8?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json"}]},{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json","productId":"AppStream-9.8.0.Z.MAIN.EUS:libxml2-debuginfo-0:2.9.13-14.el9_8.4.s390x","product":"libxml2-debuginfo-0:2.9.13-14.el9_8.4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:61247"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.\n\nUpdating to a fixed version of libxml2 (2.11.0 or later upstream, or a future RHEL errata) will fully resolve this issue."}],"purl":"pkg:rpm/redhat/libxml2-debuginfo@2.9.13-14.el9_8.4?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json"}]},{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json","productId":"AppStream-9.8.0.Z.MAIN.EUS:python3-libxml2-debuginfo-0:2.9.13-14.el9_8.4.aarch64","product":"python3-libxml2-debuginfo-0:2.9.13-14.el9_8.4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:61247"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.\n\nUpdating to a fixed version of libxml2 (2.11.0 or later upstream, or a future RHEL errata) will fully resolve this issue."}],"purl":"pkg:rpm/redhat/python3-libxml2-debuginfo@2.9.13-14.el9_8.4?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json"}]},{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json","productId":"BaseOS-8.10.0.Z.MAIN.EUS:libxml2-debuginfo-0:2.9.7-21.el8_10.8.aarch64","product":"libxml2-debuginfo-0:2.9.7-21.el8_10.8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:69655"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.\n\nUpdating to a fixed version of libxml2 (2.11.0 or later upstream, or a future RHEL errata) will fully resolve this issue."}],"purl":"pkg:rpm/redhat/libxml2-debuginfo@2.9.7-21.el8_10.8?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json"}]},{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json","productId":"BaseOS-8.10.0.Z.MAIN.EUS:python3-libxml2-0:2.9.7-21.el8_10.8.s390x","product":"python3-libxml2-0:2.9.7-21.el8_10.8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:69655"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.\n\nUpdating to a fixed version of libxml2 (2.11.0 or later upstream, or a future RHEL errata) will fully resolve this issue."}],"purl":"pkg:rpm/redhat/python3-libxml2@2.9.7-21.el8_10.8?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json"}]},{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json","productId":"BaseOS-9.8.0.Z.MAIN.EUS:libxml2-0:2.9.13-14.el9_8.4.src","product":"libxml2-0:2.9.13-14.el9_8.4.src as a component of Red Hat Enterprise Linux BaseOS (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:61247"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.\n\nUpdating to a fixed version of libxml2 (2.11.0 or later upstream, or a future RHEL errata) will fully resolve this issue."}],"purl":"pkg:rpm/redhat/libxml2@2.9.13-14.el9_8.4?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json"}]},{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json","productId":"BaseOS-9.8.0.Z.MAIN.EUS:python3-libxml2-0:2.9.13-14.el9_8.4.aarch64","product":"python3-libxml2-0:2.9.13-14.el9_8.4.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:61247"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.\n\nUpdating to a fixed version of libxml2 (2.11.0 or later upstream, or a future RHEL errata) will fully resolve this issue."}],"purl":"pkg:rpm/redhat/python3-libxml2@2.9.13-14.el9_8.4?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json"}]},{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json","productId":"Cert Manager support for Red Hat OpenShift release 1.17:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:78431228c2902c8b51c50d5f487d1789f35ac994e3089e6448234f8b13577233_arm64","product":"registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:78431228c2902c8b51c50d5f487d1789f35ac994e3089e6448234f8b13577233_arm64 as a component of Cert Manager support for Red Hat OpenShift release 1.17","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.","url":"https://access.redhat.com/errata/RHSA-2026:82336"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.\n\nUpdating to a fixed version of libxml2 (2.11.0 or later upstream, or a future RHEL errata) will fully resolve this issue."}],"purl":"pkg:oci/cert-manager-istio-csr-rhel9@sha256%3A78431228c2902c8b51c50d5f487d1789f35ac994e3089e6448234f8b13577233?arch=arm64&repository_url=registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9&tag=1791378395","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json"}]},{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json","productId":"Cert Manager support for Red Hat OpenShift release 1.17:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:d2dc2603d281e2cef02fd3c2e8af210de2f223d3ace8946980b5d8c3e0745e76_amd64","product":"registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:d2dc2603d281e2cef02fd3c2e8af210de2f223d3ace8946980b5d8c3e0745e76_amd64 as a component of Cert Manager support for Red Hat OpenShift release 1.17","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.","url":"https://access.redhat.com/errata/RHSA-2026:82304"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.\n\nUpdating to a fixed version of libxml2 (2.11.0 or later upstream, or a future RHEL errata) will fully resolve this issue."}],"purl":"pkg:oci/jetstack-cert-manager-rhel9@sha256%3Ad2dc2603d281e2cef02fd3c2e8af210de2f223d3ace8946980b5d8c3e0745e76?arch=amd64&repository_url=registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9&tag=1791371069","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json"}]},{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json","productId":"Cert Manager support for Red Hat OpenShift release 1.18:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:4edc614409d7ea9eaa011e6904797947edee52b9788bd385a2094e51afdf1c4b_ppc64le","product":"registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:4edc614409d7ea9eaa011e6904797947edee52b9788bd385a2094e51afdf1c4b_ppc64le as a component of Cert Manager support for Red Hat OpenShift release 1.18","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.","url":"https://access.redhat.com/errata/RHSA-2026:82347"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.\n\nUpdating to a fixed version of libxml2 (2.11.0 or later upstream, or a future RHEL errata) will fully resolve this issue."}],"purl":"pkg:oci/jetstack-cert-manager-acmesolver-rhel9@sha256%3A4edc614409d7ea9eaa011e6904797947edee52b9788bd385a2094e51afdf1c4b?arch=ppc64le&repository_url=registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9&tag=1791459707","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json"}]},{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json","productId":"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:97a48da1700e1a339a8ea36ece2927b870f12ca5c0aea5234216c7179d66f6f3_s390x","product":"registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:97a48da1700e1a339a8ea36ece2927b870f12ca5c0aea5234216c7179d66f6f3_s390x as a component of Cert Manager support for Red Hat OpenShift release 1.20","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.","url":"https://access.redhat.com/errata/RHSA-2026:72395"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.\n\nUpdating to a fixed version of libxml2 (2.11.0 or later upstream, or a future RHEL errata) will fully resolve this issue."}],"purl":"pkg:oci/cert-manager-istio-csr-rhel9@sha256%3A97a48da1700e1a339a8ea36ece2927b870f12ca5c0aea5234216c7179d66f6f3?arch=s390x&repository_url=registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9&tag=1790223719","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json"}]},{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json","productId":"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-operator-rhel9@sha256:e101d66f01828711216a9cd62f5e376e16d60976a2dd0b26d86d1207c830d2dc_s390x","product":"registry.redhat.io/cert-manager/cert-manager-operator-rhel9@sha256:e101d66f01828711216a9cd62f5e376e16d60976a2dd0b26d86d1207c830d2dc_s390x as a component of Cert Manager support for Red Hat OpenShift release 1.20","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.","url":"https://access.redhat.com/errata/RHSA-2026:72476"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.\n\nUpdating to a fixed version of libxml2 (2.11.0 or later upstream, or a future RHEL errata) will fully resolve this issue."}],"purl":"pkg:oci/cert-manager-operator-rhel9@sha256%3Ae101d66f01828711216a9cd62f5e376e16d60976a2dd0b26d86d1207c830d2dc?arch=s390x&repository_url=registry.redhat.io/cert-manager/cert-manager-operator-rhel9&tag=1790589855","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json"}]},{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json","productId":"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6064f0ab2db9a4f10c7453060d8281b98ce8daefed74a79079731c861715dae2_arm64","product":"registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6064f0ab2db9a4f10c7453060d8281b98ce8daefed74a79079731c861715dae2_arm64 as a component of Cert Manager support for Red Hat OpenShift release 1.20","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.","url":"https://access.redhat.com/errata/RHSA-2026:72394"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.\n\nUpdating to a fixed version of libxml2 (2.11.0 or later upstream, or a future RHEL errata) will fully resolve this issue."}],"purl":"pkg:oci/jetstack-cert-manager-rhel9@sha256%3A6064f0ab2db9a4f10c7453060d8281b98ce8daefed74a79079731c861715dae2?arch=arm64&repository_url=registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9&tag=1790223279","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json"}]},{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json","productId":"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:ace80f39f33d921b97be5c74257b52d64170e4eac4b0e2db7d7d13a598d38450_amd64","product":"registry.redhat.io/rhui5/rhua-rhel9@sha256:ace80f39f33d921b97be5c74257b52d64170e4eac4b0e2db7d7d13a598d38450_amd64 as a component of Red Hat Update Infrastructure 5","status":"fixed","remediations":[{"category":"vendor_fix","details":"The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.","url":"https://access.redhat.com/errata/RHSA-2026:66018"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.\n\nUpdating to a fixed version of libxml2 (2.11.0 or later upstream, or a future RHEL errata) will fully resolve this issue."}],"purl":"pkg:oci/rhua-rhel9@sha256%3Aace80f39f33d921b97be5c74257b52d64170e4eac4b0e2db7d7d13a598d38450?arch=amd64&repository_url=registry.redhat.io/rhui5/rhua-rhel9&tag=1788880581","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json"}]},{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json","productId":"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-8","product":"openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.\n\nUpdating to a fixed version of libxml2 (2.11.0 or later upstream, or a future RHEL errata) will fully resolve this issue."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/ose-rhel-coreos-8?repository_url=registry.redhat.io/openshift/ose-rhel-coreos-8","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json"}]},{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json","productId":"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-9","product":"openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.\n\nUpdating to a fixed version of libxml2 (2.11.0 or later upstream, or a future RHEL errata) will fully resolve this issue."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/ose-rhel-coreos-9?repository_url=registry.redhat.io/openshift/ose-rhel-coreos-9","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json"}]},{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json","productId":"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a5f4c1a5cffdd4a0449fdf9b05815810e92d27601e9d683ed647ee1c2e5df4cf_ppc64le","product":"registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a5f4c1a5cffdd4a0449fdf9b05815810e92d27601e9d683ed647ee1c2e5df4cf_ppc64le as a component of Cert Manager support for Red Hat OpenShift release 1.20","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/jetstack-cert-manager-acmesolver-rhel9@sha256%3Aa5f4c1a5cffdd4a0449fdf9b05815810e92d27601e9d683ed647ee1c2e5df4cf?arch=ppc64le&repository_url=registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9&tag=1790223630","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json"}]},{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json","productId":"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:c34db4a5a22ec01496292c66eee29ff041722ea90da13a886acbcba5f96dfb8f_amd64","product":"registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:c34db4a5a22ec01496292c66eee29ff041722ea90da13a886acbcba5f96dfb8f_amd64 as a component of Cert Manager support for Red Hat OpenShift release 1.20","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/jetstack-cert-manager-acmesolver-rhel9@sha256%3Ac34db4a5a22ec01496292c66eee29ff041722ea90da13a886acbcba5f96dfb8f?arch=amd64&repository_url=registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9&tag=1790223630","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json"}]},{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json","productId":"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:d86af8bb35aca6af6b12478d265eb7ed049c6f8ec9d67c04bd5013fdcdc8b170_s390x","product":"registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:d86af8bb35aca6af6b12478d265eb7ed049c6f8ec9d67c04bd5013fdcdc8b170_s390x as a component of Cert Manager support for Red Hat OpenShift release 1.20","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/jetstack-cert-manager-acmesolver-rhel9@sha256%3Ad86af8bb35aca6af6b12478d265eb7ed049c6f8ec9d67c04bd5013fdcdc8b170?arch=s390x&repository_url=registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9&tag=1790223630","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json"}]},{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json","productId":"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:480c69f89b45c714ec13a7901bc8615a2fa3f4622c889cd023d80a6278855a58_arm64","product":"registry.redhat.io/discovery/discovery-ui-rhel9@sha256:480c69f89b45c714ec13a7901bc8615a2fa3f4622c889cd023d80a6278855a58_arm64 as a component of Red Hat Discovery 2","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/discovery-ui-rhel9@sha256%3A480c69f89b45c714ec13a7901bc8615a2fa3f4622c889cd023d80a6278855a58?arch=arm64&repository_url=registry.redhat.io/discovery/discovery-ui-rhel9&tag=1788206196","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json"}]},{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json","productId":"red_hat_enterprise_linux_10:libxml2","product":"libxml2 as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/libxml2","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json"}]},{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json","productId":"red_hat_enterprise_linux_10:libxml2-static","product":"libxml2-static as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/libxml2-static","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json"}]},{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json","productId":"red_hat_enterprise_linux_10:libxml2.src","product":"libxml2.src as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/libxml2?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json"}]},{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json","productId":"red_hat_enterprise_linux_10:python3-libxml2","product":"python3-libxml2 as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/python3-libxml2","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json"}]},{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json","productId":"red_hat_enterprise_linux_6:libxml2-devel","product":"libxml2-devel as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/libxml2-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json"}]},{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json","productId":"red_hat_enterprise_linux_6:libxml2-static","product":"libxml2-static as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/libxml2-static","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json"}]},{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json","productId":"red_hat_enterprise_linux_6:libxml2.src","product":"libxml2.src as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/libxml2?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json"}]},{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json","productId":"red_hat_enterprise_linux_7:libxml2","product":"libxml2 as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/libxml2","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json"}]},{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json","productId":"red_hat_enterprise_linux_7:libxml2-python","product":"libxml2-python as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/libxml2-python","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json"}]},{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json","productId":"red_hat_enterprise_linux_7:libxml2.src","product":"libxml2.src as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/libxml2?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json"}]},{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json","productId":"red_hat_hardened_images:libxml2.src","product":"libxml2.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/libxml2?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-6653","modified":"2026-10-14T19:24:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6653.json"}]}],"vendorCoverage":{"total":187,"shown":32,"omitted":155,"source":"redhat"}}