Read the docs
Red Hat Security Advisory

RHSA-2026:92628

General availability of the satellite/iop-advisor-backend-rhel9 container image

Released 2026-10-29 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 2 records

Priority HIGH 77

rustls-webpki through 0.103.12 (and 0.104.0-alpha releases before 0.104.0-alpha.7) contains a reachable panic in bit_string_flags() in src/der.rs.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00346 Published 2026-09-18 Partial fix · 0.103.13, 0.104.0-alpha.7 CWE-191
Priority MEDIUM 43

Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00831 Published 2026-09-29 Partial fix · 4.0.3, 3.6.5 +5 CWE-125