Red Hat Security Advisory

RHSA-2025:14473

RHTAS 1.2.1 - Red Hat Trusted Artifact Signer Release

Released 2025-08-25 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Trusted Artifact Signer 1.2 registry.redhat.io/rhtas/cosign-rhel9, registry.redhat.io/rhtas/gitsign-rhel9

TI-2025-16746 CVE-2025-22874 · GHSA-6f52-wpx2-hvf2

LOW 39

Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00376 Published 2025-06-11 Partial fix · 1.24.4