Red Hat Security AdvisoryRHSA-2026:5459
RHTAS 1.3.3 - Red Hat Trusted Artifact Signer Release
Released 2026-03-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Trusted Artifact Signer 1.3 registry.redhat.io/rhtas/tuffer-rhel9, registry.redhat.io/rhtas/tuftool-rhel9
Fixes 5 records
Priority HIGH 71
Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00574 · Published 2026-03-10 · Partial fix · 0.11.14 CWE-248
Priority MEDIUM 50
urllib3 is an HTTP client library for Python.
CVSS 4.0HIGH 8.9· Network · No auth · No interaction · EPSS 0.02922 · Published 2026-01-07 · Partial fix · 2.6.3 CWE-409
Priority MEDIUM 45
Improper signature validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass signature verification when processing PKCS7 objects with Authenticated Attributes.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00776 · Published 2026-03-02 · Partial fix · 1.69.0 CWE-347
Priority MEDIUM 45
Improper certificate validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass certificate chain verification when processing PKCS7 objects with multiple signers, except the final signer.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00738 · Published 2026-03-02 · Partial fix · 1.69.0 CWE-295
Priority MEDIUM 40
urllib3 is a user-friendly HTTP client library for Python.
CVSS 4.0HIGH 8.9· Network · No auth · No interaction · EPSS 0.00731 · Published 2025-12-05 · Partial fix · 2.6.0 CWE-409
THREATIST.IORead the docs