Red Hat Security Advisory

RHSA-2026:92583

General availability of the satellite/iop-host-inventory-rhel9 container image

Released 2026-10-29 · Red Hat rating Critical · View on Red Hat →

Fixed in

TI-2026-65303 CVE-2026-102268 · GHSA-ffc3-869f-jxw9

HIGH 80

PyJWT is a Python implementation of JSON Web Token standards.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00236 Published 2026-09-28 Partial fix · 2.14.0 CWE-347

TI-2026-63063 CVE-2026-93599 · GHSA-g42g-9vm4-7gfj

HIGH 77

rustls-webpki through 0.103.12 (and 0.104.0-alpha releases before 0.104.0-alpha.7) contains a reachable panic in bit_string_flags() in src/der.rs.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00346 Published 2026-09-18 Partial fix · 0.103.13, 0.104.0-alpha.7 CWE-191

TI-2026-45177 CVE-2026-63374 · GHSA-82r6-8w77-94w6

MEDIUM 48

AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00289 Published 2026-09-22 Partial fix · 4.14.2 CWE-295

TI-2026-58283 CVE-2026-84782 · GHSA-6w84-hw79-7wgf

MEDIUM 43

Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00831 Published 2026-09-29 Partial fix · 4.0.3, 3.6.5 +5 CWE-125

TI-2026-65302 CVE-2026-102267 · GHSA-9v7f-9g4p-ffgj

MEDIUM 40

PyJWT is a Python implementation of JSON Web Token standards.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00159 Published 2026-09-28 Partial fix · 2.14.0 CWE-200