{ "document" : { "aggregate_severity" : { "namespace" : "https://access.redhat.com/security/updates/classification/", "text" : "Critical" }, "category" : "csaf_security_advisory", "csaf_version" : "2.0", "distribution" : { "text" : "Copyright © Red Hat, Inc. All rights reserved.", "tlp" : { "label" : "WHITE", "url" : "https://www.first.org/tlp/" } }, "lang" : "en", "notes" : [ { "category" : "summary", "text" : "Release of the RHTAS Model Transparency CLI image 1.0.6.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5", "title" : "Topic" }, { "category" : "general", "text" : "The RHTAS Model Transparency CLI image can be used to sign and verify AI/ML workloads", "title" : "Details" }, { "category" : "legal_disclaimer", "text" : "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title" : "Terms of Use" } ], "publisher" : { "category" : "vendor", "contact_details" : "https://access.redhat.com/security/team/contact/", "issuing_authority" : "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name" : "Red Hat Product Security", "namespace" : "https://www.redhat.com" }, "references" : [ { "category" : "self", "summary" : "https://access.redhat.com/errata/RHSA-2026:95261", "url" : "https://access.redhat.com/errata/RHSA-2026:95261" }, { "category" : "external", "summary" : "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5", "url" : "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5" }, { "category" : "external", "summary" : "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5/html-single/release_notes/index", "url" : "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5/html-single/release_notes/index" }, { "category" : "external", "summary" : "https://access.redhat.com/security/cve/CVE-2026-102268", "url" : "https://access.redhat.com/security/cve/CVE-2026-102268" }, { "category" : "external", "summary" : "https://access.redhat.com/security/cve/CVE-2026-102271", "url" : "https://access.redhat.com/security/cve/CVE-2026-102271" }, { "category" : "external", "summary" : "https://access.redhat.com/security/cve/CVE-2026-102272", "url" : "https://access.redhat.com/security/cve/CVE-2026-102272" }, { "category" : "external", "summary" : "https://access.redhat.com/security/cve/CVE-2026-102273", "url" : "https://access.redhat.com/security/cve/CVE-2026-102273" }, { "category" : "external", "summary" : "https://access.redhat.com/security/cve/CVE-2026-114605", "url" : "https://access.redhat.com/security/cve/CVE-2026-114605" }, { "category" : "external", "summary" : "https://access.redhat.com/security/cve/CVE-2026-119194", "url" : "https://access.redhat.com/security/cve/CVE-2026-119194" }, { "category" : "external", "summary" : "https://access.redhat.com/security/cve/CVE-2026-119195", "url" : "https://access.redhat.com/security/cve/CVE-2026-119195" }, { "category" : "external", "summary" : "https://access.redhat.com/security/cve/CVE-2026-119196", "url" : "https://access.redhat.com/security/cve/CVE-2026-119196" }, { "category" : "external", "summary" : "https://access.redhat.com/security/updates/classification/", "url" : "https://access.redhat.com/security/updates/classification/" }, { "category" : "self", "summary" : "Canonical URL", "url" : "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_95261.json" } ], "title" : "Red Hat Security Advisory: RHTAS 1.5.1 - Release of Model Transparency 1.0.6", "tracking" : { "current_release_date" : "2026-11-06T19:21:00+00:00", "generator" : { "date" : "2026-11-06T19:21:00+00:00", "engine" : { "name" : "Red Hat SDEngine", "version" : "5.4.5" } }, "id" : "RHSA-2026:95261", "initial_release_date" : "2026-11-04T15:42:45+00:00", "revision_history" : [ { "date" : "2026-11-04T15:42:45+00:00", "number" : "1", "summary" : "Initial version" }, { "date" : "2026-11-04T15:42:54+00:00", "number" : "2", "summary" : "Last updated version" }, { "date" : "2026-11-06T19:21:00+00:00", "number" : "3", "summary" : "Last generated version" } ], "status" : "final", "version" : "3" } }, "product_tree" : { "branches" : [ { "branches" : [ { "branches" : [ { "category" : "product_name", "name" : "Red Hat Trusted Artifact Signer 1.5", "product" : { "name" : "Red Hat Trusted Artifact Signer 1.5", "product_id" : "Red Hat Trusted Artifact Signer 1.5", "product_identification_helper" : { "cpe" : "cpe:/a:redhat:trusted_artifact_signer:1.5::el9" } } } ], "category" : "product_family", "name" : "Red Hat Trusted Artifact Signer" }, { "branches" : [ { "category" : "product_version", "name" : "registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64", "product" : { "name" : "registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64", "product_id" : "registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64", "product_identification_helper" : { "purl" : "pkg:oci/model-transparency-rhel9@sha256%3Aebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653?arch=amd64&repository_url=registry.redhat.io/rhtas/model-transparency-rhel9&tag=1793696578" } } } ], "category" : "architecture", "name" : "amd64" }, { "branches" : [ { "category" : "product_version", "name" : "registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64", "product" : { "name" : "registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64", "product_id" : "registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64", "product_identification_helper" : { "purl" : "pkg:oci/model-transparency-rhel9@sha256%3Afcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702?arch=arm64&repository_url=registry.redhat.io/rhtas/model-transparency-rhel9&tag=1793696578" } } } ], "category" : "architecture", "name" : "arm64" } ], "category" : "vendor", "name" : "Red Hat" } ], "relationships" : [ { "category" : "default_component_of", "full_product_name" : { "name" : "registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64 as a component of Red Hat Trusted Artifact Signer 1.5", "product_id" : "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64" }, "product_reference" : "registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64", "relates_to_product_reference" : "Red Hat Trusted Artifact Signer 1.5" }, { "category" : "default_component_of", "full_product_name" : { "name" : "registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64 as a component of Red Hat Trusted Artifact Signer 1.5", "product_id" : "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64" }, "product_reference" : "registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64", "relates_to_product_reference" : "Red Hat Trusted Artifact Signer 1.5" } ] }, "vulnerabilities" : [ { "cve" : "CVE-2026-102268", "cwe" : { "id" : "CWE-347", "name" : "Improper Verification of Cryptographic Signature" }, "discovery_date" : "2026-09-28T20:40:56.952621+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2542685" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in PyJWT. When an application allows both symmetric and asymmetric signing algorithms, minor formatting variations in a public key can prevent the library from properly identifying it as an asymmetric key. Consequently, the library improperly treats the public key as a shared secret key, allowing a remote attacker to forge valid authentication tokens and bypass security controls.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "pyjwt: PyJWT: Authentication bypass via improper public key validation", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "This vulnerability is rated as Critical severity for Red Hat products because an unauthenticated remote attacker could forge valid cryptographic tokens and bypass authentication checks without knowing the private signing key. Exploitation occurs when consuming applications configure token verification to accept both symmetric and asymmetric algorithms simultaneously, allowing an asymmetric public key to be mishandled as a symmetric secret. Deployments that strictly enforce a single algorithm type or validate tokens using JSON Web Key sets do not permit this algorithm confusion and remain unaffected.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64", "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-102268" }, { "category" : "external", "summary" : "RHBZ#2542685", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2542685" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-102268", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-102268" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-102268", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-102268" }, { "category" : "external", "summary" : "https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07", "url" : "https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07" }, { "category" : "external", "summary" : "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0", "url" : "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0" }, { "category" : "external", "summary" : "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffc3-869f-jxw9", "url" : "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffc3-869f-jxw9" } ], "release_date" : "2026-09-28T20:26:13.674000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-11-04T15:42:45+00:00", "details" : "The Model Transparency CLI Image is a containerized command-line tool for signing and verifying AI/ML workloads against a private Red Hat Trusted Artifact Signer (RHTAS) instance. It lets teams create signatures and attestations for model artifacts and validate them at build or deploy time using enterprise trust material (e.g., Fulcio/Rekor).\n\nFor details on using the Model Transparency CLI image, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5/html-single/release_notes/index", "product_ids" : [ "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64", "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:95261" }, { "category" : "workaround", "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.", "product_ids" : [ "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64", "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "NONE", "baseScore" : 9.1, "baseSeverity" : "CRITICAL", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version" : "3.1" }, "products" : [ "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64", "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64" ] } ], "threats" : [ { "category" : "impact", "details" : "Critical" } ], "title" : "pyjwt: PyJWT: Authentication bypass via improper public key validation" }, { "cve" : "CVE-2026-102271", "cwe" : { "id" : "CWE-347", "name" : "Improper Verification of Cryptographic Signature" }, "discovery_date" : "2026-09-28T20:41:35.219179+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2542687" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in PyJWT. The library fails to identify asymmetric public keys supplied in Distinguished Encoding Rules (DER) format, inadvertently treating the public data as a shared secret in Hash-based Message Authentication Code (HMAC) operations. If an application supports both asymmetric and symmetric signing algorithms, a remote attacker knowing the public key can exploit this flaw to forge valid authentication tokens and bypass access controls.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "pyjwt: PyJWT: Authentication bypass via acceptance of DER public keys as HMAC secrets", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "This vulnerability is rated as Important because an attacker can forge valid JSON Web Tokens and bypass authentication mechanisms if public cryptographic keys are mistakenly treated as shared secrets. Exploitation requires a specific application scenario where both asymmetric and HMAC algorithms are concurrently permitted during signature verification and public keys are provided in raw DER binary format. Typical Red Hat product integrations do not employ this vulnerable algorithm combination or key encoding by default, which restricts the overall attack surface in standard production environments.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64", "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-102271" }, { "category" : "external", "summary" : "RHBZ#2542687", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2542687" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-102271", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-102271" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-102271", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-102271" }, { "category" : "external", "summary" : "https://github.com/jpadilla/pyjwt/commit/2798504fa2663364573cf2d1043d8d7fef389499", "url" : "https://github.com/jpadilla/pyjwt/commit/2798504fa2663364573cf2d1043d8d7fef389499" }, { "category" : "external", "summary" : "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0", "url" : "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0" }, { "category" : "external", "summary" : "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-p4g4-x82p-q773", "url" : "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-p4g4-x82p-q773" } ], "release_date" : "2026-09-28T20:31:53.066000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-11-04T15:42:45+00:00", "details" : "The Model Transparency CLI Image is a containerized command-line tool for signing and verifying AI/ML workloads against a private Red Hat Trusted Artifact Signer (RHTAS) instance. It lets teams create signatures and attestations for model artifacts and validate them at build or deploy time using enterprise trust material (e.g., Fulcio/Rekor).\n\nFor details on using the Model Transparency CLI image, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5/html-single/release_notes/index", "product_ids" : [ "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64", "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:95261" }, { "category" : "workaround", "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.", "product_ids" : [ "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64", "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "HIGH", "attackVector" : "NETWORK", "availabilityImpact" : "NONE", "baseScore" : 7.4, "baseSeverity" : "HIGH", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version" : "3.1" }, "products" : [ "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64", "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "pyjwt: PyJWT: Authentication bypass via acceptance of DER public keys as HMAC secrets" }, { "cve" : "CVE-2026-102272", "cwe" : { "id" : "CWE-347", "name" : "Improper Verification of Cryptographic Signature" }, "discovery_date" : "2026-09-28T20:51:42.409127+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2542695" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in pyjwt. When verifying cryptographic keys, the raw JSON Web Key (JWK) parser fails to normalize Unicode byte-order marks (BOM). In mixed-algorithm verification environments, an attacker who knows the public key can supply a key prefixed with a byte-order mark, causing the system to misidentify the public key as a shared symmetric secret. This flaw allows an attacker to forge authenticated JSON Web Tokens (JWT) and bypass authentication controls.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "pyjwt: pyjwt: Token forgery via improper Unicode byte-order mark handling", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "This vulnerability is rated as an Important severity because successful exploitation permits an unauthenticated remote attacker to bypass authentication and forge valid tokens, though exploitation requires specific mixed-algorithm verification settings. In Red Hat environments, exposure is restricted to services that simultaneously allow both symmetric HMAC and asymmetric signature algorithms while parsing public keys that contain byte order marks. Workloads and services that enforce single-algorithm verification policies or utilize standard asymmetric key validation routines are not susceptible to this attack.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64", "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-102272" }, { "category" : "external", "summary" : "RHBZ#2542695", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2542695" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-102272", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-102272" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-102272", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-102272" }, { "category" : "external", "summary" : "https://github.com/jpadilla/pyjwt/commit/180783930de91876bc0d601f826a1f2956057291", "url" : "https://github.com/jpadilla/pyjwt/commit/180783930de91876bc0d601f826a1f2956057291" }, { "category" : "external", "summary" : "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0", "url" : "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0" }, { "category" : "external", "summary" : "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-r6x4-923q-g947", "url" : "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-r6x4-923q-g947" } ], "release_date" : "2026-09-28T20:36:31.530000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-11-04T15:42:45+00:00", "details" : "The Model Transparency CLI Image is a containerized command-line tool for signing and verifying AI/ML workloads against a private Red Hat Trusted Artifact Signer (RHTAS) instance. It lets teams create signatures and attestations for model artifacts and validate them at build or deploy time using enterprise trust material (e.g., Fulcio/Rekor).\n\nFor details on using the Model Transparency CLI image, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5/html-single/release_notes/index", "product_ids" : [ "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64", "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:95261" }, { "category" : "workaround", "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.", "product_ids" : [ "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64", "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "HIGH", "attackVector" : "NETWORK", "availabilityImpact" : "NONE", "baseScore" : 7.4, "baseSeverity" : "HIGH", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version" : "3.1" }, "products" : [ "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64", "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "pyjwt: pyjwt: Token forgery via improper Unicode byte-order mark handling" }, { "cve" : "CVE-2026-102273", "cwe" : { "id" : "CWE-347", "name" : "Improper Verification of Cryptographic Signature" }, "discovery_date" : "2026-09-28T20:52:12.127939+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2542697" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in PyJWT. This vulnerability allows an unauthenticated remote attacker to bypass authentication by forging arbitrary JSON Web Tokens (JWTs). When an application allows both symmetric and asymmetric algorithms, PyJWT fails to properly validate public JSON Web Key (JWK) container representations, mistakenly accepting public key material as a symmetric Hash-based Message Authentication Code (HMAC) secret. As a result, an attacker with knowledge of the public key can generate validly signed tokens with arbitrary authenticated claims.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "pyjwt: pyjwt: Token forgery via acceptance of public JWK containers as HMAC secrets", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "Red Hat rates this vulnerability as Important because an attacker with access to a public verification key can forge cryptographic tokens to bypass authentication, allowing impersonation of privileged users and unauthorized access to protected application resources. Exploitation is limited to environments where applications concurrently permit symmetric HMAC and asymmetric algorithms while passing public key containers into validation routines.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64", "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-102273" }, { "category" : "external", "summary" : "RHBZ#2542697", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2542697" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-102273", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-102273" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-102273", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-102273" }, { "category" : "external", "summary" : "https://github.com/jpadilla/pyjwt/commit/801cd128528c62d9b23fcd161d1a2e1c17982f95", "url" : "https://github.com/jpadilla/pyjwt/commit/801cd128528c62d9b23fcd161d1a2e1c17982f95" }, { "category" : "external", "summary" : "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0", "url" : "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0" }, { "category" : "external", "summary" : "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w2cx-738m-mc7w", "url" : "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w2cx-738m-mc7w" } ], "release_date" : "2026-09-28T20:38:28.161000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-11-04T15:42:45+00:00", "details" : "The Model Transparency CLI Image is a containerized command-line tool for signing and verifying AI/ML workloads against a private Red Hat Trusted Artifact Signer (RHTAS) instance. It lets teams create signatures and attestations for model artifacts and validate them at build or deploy time using enterprise trust material (e.g., Fulcio/Rekor).\n\nFor details on using the Model Transparency CLI image, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5/html-single/release_notes/index", "product_ids" : [ "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64", "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:95261" }, { "category" : "workaround", "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.", "product_ids" : [ "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64", "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "HIGH", "attackVector" : "NETWORK", "availabilityImpact" : "NONE", "baseScore" : 7.4, "baseSeverity" : "HIGH", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version" : "3.1" }, "products" : [ "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64", "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "pyjwt: pyjwt: Token forgery via acceptance of public JWK containers as HMAC secrets" }, { "cve" : "CVE-2026-114605", "cwe" : { "id" : "CWE-606", "name" : "Unchecked Input for Loop Condition" }, "discovery_date" : "2026-10-22T16:42:27.165994+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2559128" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in dnspython. A remote attacker can cause a Denial of Service (DoS) by sending a specially crafted Domain Name System (DNS) message containing excessive compression pointer chains. Because the parser does not enforce a hop limit during name decompression, processing these malformed messages leads to excessive CPU utilization and application unresponsiveness.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "dnspython: dnspython: Denial of Service via excessive DNS compression pointer traversal", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "This vulnerability is rated as an Important impact because an unauthenticated remote attacker can trigger complete CPU exhaustion and application unresponsiveness without requiring specialized access or privileges. In Red Hat enterprise deployments, the library is embedded across multiple platform services and containerized environments that process network records. Systems are primarily vulnerable when applications accept and decompress wire-format responses from untrusted external name servers.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64", "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-114605" }, { "category" : "external", "summary" : "RHBZ#2559128", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2559128" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-114605", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-114605" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-114605", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-114605" }, { "category" : "external", "summary" : "https://github.com/rthalley/dnspython/commit/b485e460c266540a1a09ca6d8d1d7b685b1d3023", "url" : "https://github.com/rthalley/dnspython/commit/b485e460c266540a1a09ca6d8d1d7b685b1d3023" }, { "category" : "external", "summary" : "https://github.com/rthalley/dnspython/releases/tag/v2.9.0", "url" : "https://github.com/rthalley/dnspython/releases/tag/v2.9.0" }, { "category" : "external", "summary" : "https://github.com/rthalley/dnspython/security/advisories/GHSA-45c3-73f7-pv4m", "url" : "https://github.com/rthalley/dnspython/security/advisories/GHSA-45c3-73f7-pv4m" } ], "release_date" : "2026-10-22T16:25:32.509000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-11-04T15:42:45+00:00", "details" : "The Model Transparency CLI Image is a containerized command-line tool for signing and verifying AI/ML workloads against a private Red Hat Trusted Artifact Signer (RHTAS) instance. It lets teams create signatures and attestations for model artifacts and validate them at build or deploy time using enterprise trust material (e.g., Fulcio/Rekor).\n\nFor details on using the Model Transparency CLI image, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5/html-single/release_notes/index", "product_ids" : [ "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64", "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:95261" } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version" : "3.1" }, "products" : [ "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64", "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "dnspython: dnspython: Denial of Service via excessive DNS compression pointer traversal" }, { "cve" : "CVE-2026-119194", "cwe" : { "id" : "CWE-770", "name" : "Allocation of Resources Without Limits or Throttling" }, "discovery_date" : "2026-10-29T20:04:23.885333+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2563664" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in pyasn1. A remote attacker could trigger a Denial of Service (DoS) by sending specially crafted Abstract Syntax Notation One (ASN.1) data containing colliding tag identifiers during schemaless decoding. Processing these inputs causes inefficient container lookups that consume excessive CPU resources, leading to service degradation or unresponsiveness.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "pyasn1: pyasn1: Denial of Service via hash collisions in schemaless decoding", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "This vulnerability is rated as an Important impact because unauthenticated remote attackers can cause complete availability loss through CPU exhaustion against services processing untrusted ASN.1 data. The risk manifests when applications decode BER, CER, or DER structures without an explicit schema, allowing crafted colliding tag identifiers to induce quadratic computational overhead. Deployments where pyasn1 operations validate inputs against predefined schemas or operate exclusively on trusted internal data remain unaffected.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64", "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-119194" }, { "category" : "external", "summary" : "RHBZ#2563664", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2563664" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-119194", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-119194" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-119194", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-119194" }, { "category" : "external", "summary" : "https://github.com/pyasn1/pyasn1/commit/a36e3a3d067148d26197a6b7221fd0e2cde9cc86", "url" : "https://github.com/pyasn1/pyasn1/commit/a36e3a3d067148d26197a6b7221fd0e2cde9cc86" }, { "category" : "external", "summary" : "https://github.com/pyasn1/pyasn1/pull/132", "url" : "https://github.com/pyasn1/pyasn1/pull/132" }, { "category" : "external", "summary" : "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.5", "url" : "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.5" }, { "category" : "external", "summary" : "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-fm9c-5rcf-2q5p", "url" : "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-fm9c-5rcf-2q5p" } ], "release_date" : "2026-10-29T19:38:14.056000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-11-04T15:42:45+00:00", "details" : "The Model Transparency CLI Image is a containerized command-line tool for signing and verifying AI/ML workloads against a private Red Hat Trusted Artifact Signer (RHTAS) instance. It lets teams create signatures and attestations for model artifacts and validate them at build or deploy time using enterprise trust material (e.g., Fulcio/Rekor).\n\nFor details on using the Model Transparency CLI image, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5/html-single/release_notes/index", "product_ids" : [ "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64", "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:95261" } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version" : "3.1" }, "products" : [ "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64", "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "pyasn1: pyasn1: Denial of Service via hash collisions in schemaless decoding" }, { "cve" : "CVE-2026-119195", "cwe" : { "id" : "CWE-1046", "name" : "Creation of Immutable Text Using String Concatenation" }, "discovery_date" : "2026-10-29T19:59:48.293862+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2563663" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in pyasn1. A remote attacker can cause a Denial of Service (DoS) by providing specially crafted ASN.1 (Abstract Syntax Notation One) encoded data containing numerous fragments. During the decoding of constructed strings or indefinite-length values, the library repeatedly concatenates incoming data chunks, causing quadratic processing overhead. This excessive workload can lead to CPU resource exhaustion, rendering the application unresponsive.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "pyasn1: pyasn1: Denial of Service via quadratic processing of fragmented ASN.1 data", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "This vulnerability is rated as Important because unauthenticated remote attackers can trigger severe denial of service against network-facing services without requiring privileges or prior authentication. Red Hat environments running platforms and containerized services that parse external ASN.1 inputs are directly exposed, as processing heavily segmented streams monopolizes backend CPU cycles. The impact is confined to system availability, with no breach of data integrity or confidentiality.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64", "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-119195" }, { "category" : "external", "summary" : "RHBZ#2563663", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2563663" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-119195", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-119195" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-119195", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-119195" }, { "category" : "external", "summary" : "https://github.com/pyasn1/pyasn1/commit/4ce00797c594b59c1fd6b86d9ebc3ba87b7ec9f9", "url" : "https://github.com/pyasn1/pyasn1/commit/4ce00797c594b59c1fd6b86d9ebc3ba87b7ec9f9" }, { "category" : "external", "summary" : "https://github.com/pyasn1/pyasn1/pull/132", "url" : "https://github.com/pyasn1/pyasn1/pull/132" }, { "category" : "external", "summary" : "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.5", "url" : "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.5" }, { "category" : "external", "summary" : "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-9m75-vc3g-4x39", "url" : "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-9m75-vc3g-4x39" } ], "release_date" : "2026-10-29T19:41:37.352000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-11-04T15:42:45+00:00", "details" : "The Model Transparency CLI Image is a containerized command-line tool for signing and verifying AI/ML workloads against a private Red Hat Trusted Artifact Signer (RHTAS) instance. It lets teams create signatures and attestations for model artifacts and validate them at build or deploy time using enterprise trust material (e.g., Fulcio/Rekor).\n\nFor details on using the Model Transparency CLI image, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5/html-single/release_notes/index", "product_ids" : [ "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64", "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:95261" } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version" : "3.1" }, "products" : [ "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64", "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "pyasn1: pyasn1: Denial of Service via quadratic processing of fragmented ASN.1 data" }, { "cve" : "CVE-2026-119196", "cwe" : { "id" : "CWE-770", "name" : "Allocation of Resources Without Limits or Throttling" }, "discovery_date" : "2026-10-29T20:13:17.827067+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2563666" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in pyasn1. A remote attacker can cause a Denial of Service (DoS) by sending specially crafted Abstract Syntax Notation One (ASN.1) data containing multiple constructed bit string fragments. When decoding these fragments, the library repeatedly copies and shifts accumulated bit data, leading to quadratic processing time and excessive CPU consumption.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "pyasn1: pyasn1: Denial of Service via constructed bit string decoding", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "Red Hat has classified this vulnerability as Important because an unauthenticated network attacker can cause CPU starvation and worker thread exhaustion across network-exposed services without requiring elevated privileges. Within Red Hat distributions and enterprise platforms, pyasn1 serves as an underlying ASN.1 parsing library for several automation components, identity management services, and containerized workloads. Although client-side and internal utilities experience negligible operational risk, network-facing services that ingest untrusted or schema-less ASN.1 structures are directly exposed to availability denial.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64", "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-119196" }, { "category" : "external", "summary" : "RHBZ#2563666", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2563666" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-119196", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-119196" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-119196", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-119196" }, { "category" : "external", "summary" : "https://github.com/pyasn1/pyasn1/commit/73ba7b043cc7e92cb37f16f2c955bff93b0e6f6c", "url" : "https://github.com/pyasn1/pyasn1/commit/73ba7b043cc7e92cb37f16f2c955bff93b0e6f6c" }, { "category" : "external", "summary" : "https://github.com/pyasn1/pyasn1/pull/132", "url" : "https://github.com/pyasn1/pyasn1/pull/132" }, { "category" : "external", "summary" : "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.5", "url" : "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.5" }, { "category" : "external", "summary" : "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-2qm8-x737-gmw5", "url" : "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-2qm8-x737-gmw5" } ], "release_date" : "2026-10-29T19:44:46.031000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-11-04T15:42:45+00:00", "details" : "The Model Transparency CLI Image is a containerized command-line tool for signing and verifying AI/ML workloads against a private Red Hat Trusted Artifact Signer (RHTAS) instance. It lets teams create signatures and attestations for model artifacts and validate them at build or deploy time using enterprise trust material (e.g., Fulcio/Rekor).\n\nFor details on using the Model Transparency CLI image, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5/html-single/release_notes/index", "product_ids" : [ "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64", "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:95261" } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version" : "3.1" }, "products" : [ "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:ebbfa676b90c7a6190b7498b4add8f0ef4a585f9d91ba2e85d3973d9f5788653_amd64", "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-rhel9@sha256:fcf6f9e17002b714a3925fb6e012a96d4bd4607560bf02449c430106a8166702_arm64" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "pyasn1: pyasn1: Denial of Service via constructed bit string decoding" } ] }