Red Hat Security Advisory

RHSA-2026:24479

RHTAS 1.3.5 - Red Hat Trusted Artifact Signer Release

Released 2026-06-08 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Trusted Artifact Signer 1.3 registry.redhat.io/rhtas/certificate-transparency-rhel9, registry.redhat.io/rhtas/fulcio-rhel9, registry.redhat.io/rhtas/rekor-backfill-redis-rhel9 +5

Fixes 3 records

TI-2026-26188 CVE-2026-33816 · GHSA-9jj7-4m8r-rfcm

CVE-2026-33816 in github.com/jackc/pgx

MEDIUM 50

Memory-safety vulnerability in github.com/jackc/pgx/v5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00583 Published 2026-04-07 Partial fix · 5.9.0 CWE-20

TI-2026-26187 CVE-2026-33815 · GHSA-xgrm-4fwx-7qm8

CVE-2026-33815 in github.com/jackc/pgx

MEDIUM 50

Memory-safety vulnerability in github.com/jackc/pgx/v5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00629 Published 2026-04-07 Partial fix · 5.9.0

TI-2026-27208 CVE-2026-34986 · GHSA-78h2-9frx-2jm8

Go JOSE affect by a panic in JWE decryption

MEDIUM 40

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00663 Published 2026-04-06 Partial fix · 4.1.4, 3.0.5 CWE-248