Red Hat Security AdvisoryRHSA-2026:92628
General availability of the satellite/iop-advisor-backend-rhel9 container image
Released 2026-10-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Satellite 6.18 registry.redhat.io/satellite/iop-advisor-backend-rhel9
Fixes 2 records
Priority HIGH 77
rustls-webpki through 0.103.12 (and 0.104.0-alpha releases before 0.104.0-alpha.7) contains a reachable panic in bit_string_flags() in src/der.rs.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00346 · Published 2026-09-18 · Partial fix · 0.103.13, 0.104.0-alpha.7 CWE-191
Priority MEDIUM 43
Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00831 · Published 2026-09-29 · Partial fix · 4.0.3, 3.6.5 +5 CWE-125