Red Hat Security Advisory

RHSA-2026:25138

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-06-10 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images cosign-3.1.1-0.1.hum1@aarch64, cosign-3.1.1-0.1.hum1@src, cosign-3.1.1-0.1.hum1@x86_64

TI-2026-33087 CVE-2026-45287 · GHSA-995v-fvrw-c78m

MEDIUM 44

OpenTelemetry-Go is the Go implementation of OpenTelemetry.

CVSS 4.0LOW 2.1 Local No auth No interaction EPSS 0.00168 Published 2026-06-04 Partial fix · 0.0.17 CWE-772

TI-2026-35984 CVE-2026-48702 · GHSA-47q9-m4ww-924m

LOW 39

Rekor is a software supply chain transparency log.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0046 Published 2026-08-13 Partial fix · 1.5.2 CWE-770

TI-2026-30292 CVE-2026-41889 · GHSA-j88v-2chj-qfwx

LOW 12

pgx is a PostgreSQL driver and toolkit for Go.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00356 Published 2026-05-08 Partial fix · 5.9.2 CWE-89