Red Hat Security AdvisoryRHSA-2026:10125
RHTAS 1.3.4 - Red Hat Trusted Artifact Signer Release
Released 2026-04-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Trusted Artifact Signer 1.3 registry.redhat.io/rhtas/client-server-rhel9
Fixes 8 records
Priority MEDIUM 51
During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have…
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.00902 · Published 2026-02-05 · Partial fix · 1.24.13, 1.25.7 +1 CWE-295
Priority MEDIUM 49
gRPC-Go is the Go language implementation of gRPC.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01619 · Published 2026-03-20 · Partial fix · 1.79.3 CWE-285
Priority MEDIUM 43
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00507 · Published 2026-03-27 · Partial fix · 0.28.1 CWE-22
Priority MEDIUM 42
Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines.
CVSS 3.1CRITICAL 9.6· Network · Low privileges · No interaction · EPSS 0.00583 · Published 2026-03-23 · Partial fix · 1.0.1, 1.3.3 +3 CWE-22
Priority MEDIUM 40
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00663 · Published 2026-04-06 · Partial fix · 4.1.4, 3.0.5 CWE-248
Priority MEDIUM 40
When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applie…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00661 · Published 2026-03-06 · Partial fix · 1.26.1 CWE-295
Priority MEDIUM 40
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00827 · Published 2026-03-06 · Partial fix · 1.25.8, 1.26.1 CWE-425
Priority LOW 36
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner.
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.00481 · Published 2026-03-27 · Partial fix · 0.28.1 CWE-22