RHSA-2026:4271 - Security Advisory

标题

The Tech Preview release of the RHTAS Model Transparency CLI image.
For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3

描述

The RHTAS Model Transparency CLI image can be used to sign and verify AI/ML workloads

解决方案

The Model Transparency CLI Image is a containerized command-line tool for signing and verifying AI/ML workloads against a private Red Hat Trusted Artifact Signer (RHTAS) instance. It lets teams create signatures and attestations for model artifacts and validate them at build or deploy time using enterprise trust material (e.g., Fulcio/Rekor).

For details on using the Model Transparency CLI image, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3

You can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index

修复

CVE

• CVE-2025-12638
• CVE-2025-66418
• CVE-2025-66471
• CVE-2026-0897
• CVE-2026-21441
• CVE-2026-24049

参考

• https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3
• https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index
• https://access.redhat.com/security/updates/classification/