VDB
RHSA-2026:56347
RHSA-2026:56347
PUBLISHED
CVSS 5.900000095367432 MEDIUM
A flaw was found in database/sql. Concurrent queries can produce unexpected results when a query is cancelled during a Scan method call on returned Rows, creating a race condition. This vulnerability allows an attacker who can initiate and cancel queries to trigger this condition, possibly leading to inconsistent data being returned to the application.
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/mta/mta-hub-rhel9@sha256:9ec7176c85ff087b94299dac428592bb319f6b87179f412eb3fa9ac4f1dfbd08_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
| Red Hat | registry.redhat.io/mta/mta-rhel9-operator@sha256:923e0fbe8f2c884cade697c2bc7ca1c083d905be1d16aed57676d6bf680e37dd_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
| Red Hat | registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:85c0cfc68dd650dbeb229edc15d209d10346ddd49e068ad8a2eb5970557c9387_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
| Red Hat | registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:217d17628517a32622bdcc0876a1001e4401e0b7dd4000424c117590cb032680_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
| Red Hat | registry.redhat.io/mta/mta-platform-addon-rhel9@sha256:d8bfece0657f837ae32197d56f268ad9d82c10df76717e06cdc3bfe1afd89f6e_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
| Red Hat | registry.redhat.io/mta/mta-java-external-provider-rhel9@sha256:21eb077c0e6023f3a01473352b18d1440b2b8575b3721013c0470dc90aae5d39_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
| Red Hat | registry.redhat.io/mta/mta-hub-rhel9@sha256:ec57ea8103b8ca3d6231c8d647ecc1b9275f5b9aba92aa773bfebbf07e0746ba_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
| Red Hat | registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:23547d00b217e51c82f3a13bc24e9b24b8be8846b32b7c54221f7a5d06af14f0_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
| Red Hat | registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:9b324fbe469630b52c2a5276b690a69ad4919c4aa2129af5510820bae148b98a_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
| Red Hat | registry.redhat.io/mta/mta-python-external-provider-rhel9@sha256:aa2c27ffd47d25e428e89d7f8ae54040508d898b5ade5889132e8c0dd4e93d6b_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
| Red Hat | registry.redhat.io/mta/mta-discovery-addon-rhel9@sha256:711d2f89b670111a19e8aea50abfe5916792829860dea145494e1a874e376ed5_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
| Red Hat | registry.redhat.io/mta/mta-ui-rhel9@sha256:0c2bed0250adfaf45251a115074fd65f574eb555cdc5b8063bcf7504347e4678_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
| Red Hat | registry.redhat.io/mta/mta-rhel9-operator@sha256:d7e2a29f4829c56906dfd89f58de7f7369cf7a4504cc5e6a641ffdd979762ec5_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
| Red Hat | registry.redhat.io/mta/mta-cli-rhel9@sha256:98335eb713618111e76134d014e544f2aa3cfc33e70dc45136f9ae0c6d3cf92a_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
| Red Hat | registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:064603da13efaa261f392666f3460868f4020155fdbf793da69840fe3ab24ee2_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
| Red Hat | registry.redhat.io/mta/mta-operator-bundle@sha256:46e80cea9ed559ba86ffc80d164d1d2ec80f316e315ffecc2c3e2cc00bd3b0ed_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
| Red Hat | registry.redhat.io/mta/mta-solution-server-rhel9@sha256:67c988666ee09c4397405c02a6d67d210dc54e1f50c943fba4f5b471a231ac17_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
| Red Hat | registry.redhat.io/mta/mta-dotnet-external-provider-rhel9@sha256:c5081a7efaeab495ef639cb5a3cc4e4b496d922785975a9bb20b39a77a7f7a60_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
| Red Hat | registry.redhat.io/mta/mta-nodejs-external-provider-rhel9@sha256:27eb7837e87060c65c7bc0eddfc32a295764ca2e0c4e8db2ebdee9ae5d91d830_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
| Red Hat | registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:745dd840ff971dc2079fddd2b48554bd06fbae2c653db71581ba1424586e18b5_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2 | * |
…and 7 more
Timeline
- Aug 18, 2026 CVE Published
- Oct 25, 2026 CVE Updated
- Oct 25, 2026 Distribution Patch
- Oct 25, 2026 Distribution Patch
- Oct 25, 2026 Distribution Patch
- Oct 25, 2026 Security Advisory
- Oct 25, 2026 Security Advisory
- Oct 25, 2026 Security Advisory
- Oct 25, 2026 Security Advisory
- Oct 25, 2026 Security Advisory
- Oct 25, 2026 Security Advisory
- Oct 25, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:56347 advisory
- https://access.redhat.com/security/cve/CVE-2025-47907 advisory
- https://access.redhat.com/security/cve/CVE-2025-53547 advisory
- https://access.redhat.com/security/cve/CVE-2025-58183 advisory
- https://access.redhat.com/security/cve/CVE-2025-61729 advisory
- https://access.redhat.com/security/cve/CVE-2026-25681 advisory
- https://access.redhat.com/security/cve/CVE-2026-27136 advisory
- https://access.redhat.com/security/cve/CVE-2026-44431 advisory
- https://access.redhat.com/security/cve/CVE-2026-44432 advisory
- https://access.redhat.com/security/cve/CVE-2026-59885 advisory
- https://access.redhat.com/security/cve/CVE-2026-59886 advisory
- https://access.redhat.com/security/cve/CVE-2026-8643 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://developers.redhat.com/products/mta/overview advisory
- https://docs.redhat.com/en/documentation/migration_toolkit_for_applications/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_56347.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2387083 issue
- https://www.cve.org/CVERecord?id=CVE-2025-47907 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-47907 advisory
- https://go.dev/cl/693735 advisory
…and 59 more