Red Hat Security Advisory

RHSA-2026:2925

RHTAS 1.2.2 - Red Hat Trusted Artifact Signer Release

Released 2026-02-18 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Trusted Artifact Signer 1.2 registry.redhat.io/rhtas/segment-reporting-rhel9

TI-2026-19377 CVE-2026-24049 · GHSA-8rrh-rw8j-w5fx

MEDIUM 64

wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.0035 Published 2026-01-22 Partial fix · 0.46.2 CWE-22

TI-2026-17326 CVE-2026-21441 · GHSA-38jv-5279-wg99

MEDIUM 50

urllib3 is an HTTP client library for Python.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.02922 Published 2026-01-07 Partial fix · 2.6.3 CWE-409

TI-2025-40854 CVE-2025-66418 · GHSA-gm62-xv2j-4w53

MEDIUM 46

urllib3 is a user-friendly HTTP client library for Python.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00731 Published 2025-12-05 Partial fix · 2.6.0 CWE-770

TI-2025-40898 CVE-2025-66471 · GHSA-2xpw-w6gg-jr37

MEDIUM 40

urllib3 is a user-friendly HTTP client library for Python.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00731 Published 2025-12-05 Partial fix · 2.6.0 CWE-409

TI-2025-40094 CVE-2025-64756 · GHSA-5j98-mcp5-4vw2

MEDIUM 40

Glob matches files using patterns the shell uses.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.0309 Published 2025-11-17 Partial fix · 10.5.0, 11.1.0 CWE-78