Red Hat Security Advisory

RHSA-2026:2924

RHTAS 1.2.2 - Red Hat Trusted Artifact Signer Release

Released 2026-02-18 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Trusted Artifact Signer 1.2 registry.redhat.io/rhtas/client-server-rhel9

TI-2026-18290 CVE-2026-22772 · GHSA-59jp-pj84-45mr

HIGH 65

Fulcio is a certificate authority for issuing code signing certificates for an OpenID Connect (OIDC) identity.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00232 Published 2026-01-12 Partial fix · 1.8.5 CWE-918

TI-2026-17326 CVE-2026-21441 · GHSA-38jv-5279-wg99

MEDIUM 50

urllib3 is an HTTP client library for Python.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.02922 Published 2026-01-07 Partial fix · 2.6.3 CWE-409

TI-2025-40854 CVE-2025-66418 · GHSA-gm62-xv2j-4w53

MEDIUM 46

urllib3 is a user-friendly HTTP client library for Python.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00731 Published 2025-12-05 Partial fix · 2.6.0 CWE-770

TI-2025-40898 CVE-2025-66471 · GHSA-2xpw-w6gg-jr37

MEDIUM 40

urllib3 is a user-friendly HTTP client library for Python.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00731 Published 2025-12-05 Partial fix · 2.6.0 CWE-409

TI-2025-40928 CVE-2025-66506 · GHSA-f83f-xpx7-ffpw

LOW 38

Fulcio is a free-to-use certificate authority for issuing code signing certificates for an OpenID Connect (OIDC) identity.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00226 Published 2025-12-04 Partial fix · 1.8.3 CWE-405