{
  "document" : {
    "aggregate_severity" : {
      "namespace" : "https://access.redhat.com/security/updates/classification/",
      "text" : "Moderate"
    },
    "category" : "csaf_security_advisory",
    "csaf_version" : "2.0",
    "distribution" : {
      "text" : "Copyright © Red Hat, Inc. All rights reserved.",
      "tlp" : {
        "label" : "WHITE",
        "url" : "https://www.first.org/tlp/"
      }
    },
    "lang" : "en",
    "notes" : [ {
      "category" : "summary",
      "text" : "Release of the RHTAS Model Transparency Go CLI image 1.0.1.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5",
      "title" : "Topic"
    }, {
      "category" : "general",
      "text" : "The RHTAS Model Transparency Go CLI image can be used to sign and verify AI/ML workloads",
      "title" : "Details"
    }, {
      "category" : "legal_disclaimer",
      "text" : "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
      "title" : "Terms of Use"
    } ],
    "publisher" : {
      "category" : "vendor",
      "contact_details" : "https://access.redhat.com/security/team/contact/",
      "issuing_authority" : "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name" : "Red Hat Product Security",
      "namespace" : "https://www.redhat.com"
    },
    "references" : [ {
      "category" : "self",
      "summary" : "https://access.redhat.com/errata/RHSA-2026:95263",
      "url" : "https://access.redhat.com/errata/RHSA-2026:95263"
    }, {
      "category" : "external",
      "summary" : "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5",
      "url" : "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5"
    }, {
      "category" : "external",
      "summary" : "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5/html-single/release_notes/index",
      "url" : "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5/html-single/release_notes/index"
    }, {
      "category" : "external",
      "summary" : "https://access.redhat.com/security/cve/CVE-2026-39834",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-39834"
    }, {
      "category" : "external",
      "summary" : "https://access.redhat.com/security/updates/classification/",
      "url" : "https://access.redhat.com/security/updates/classification/"
    }, {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_95263.json"
    } ],
    "title" : "Red Hat Security Advisory: RHTAS 1.5.1 - Release of Model Transparency Go 1.0.1",
    "tracking" : {
      "current_release_date" : "2026-11-09T16:41:33+00:00",
      "generator" : {
        "date" : "2026-11-09T16:41:33+00:00",
        "engine" : {
          "name" : "Red Hat SDEngine",
          "version" : "5.4.5"
        }
      },
      "id" : "RHSA-2026:95263",
      "initial_release_date" : "2026-11-04T16:05:44+00:00",
      "revision_history" : [ {
        "date" : "2026-11-04T16:05:44+00:00",
        "number" : "1",
        "summary" : "Initial version"
      }, {
        "date" : "2026-11-04T16:05:51+00:00",
        "number" : "2",
        "summary" : "Last updated version"
      }, {
        "date" : "2026-11-09T16:41:33+00:00",
        "number" : "3",
        "summary" : "Last generated version"
      } ],
      "status" : "final",
      "version" : "3"
    }
  },
  "product_tree" : {
    "branches" : [ {
      "branches" : [ {
        "branches" : [ {
          "category" : "product_name",
          "name" : "Red Hat Trusted Artifact Signer 1.5",
          "product" : {
            "name" : "Red Hat Trusted Artifact Signer 1.5",
            "product_id" : "Red Hat Trusted Artifact Signer 1.5",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:redhat:trusted_artifact_signer:1.5::el9"
            }
          }
        } ],
        "category" : "product_family",
        "name" : "Red Hat Trusted Artifact Signer"
      }, {
        "branches" : [ {
          "category" : "product_version",
          "name" : "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:128c46767556694cd8e13fb7f855a26caec64439cfe1684f73a85a48bad4a595_amd64",
          "product" : {
            "name" : "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:128c46767556694cd8e13fb7f855a26caec64439cfe1684f73a85a48bad4a595_amd64",
            "product_id" : "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:128c46767556694cd8e13fb7f855a26caec64439cfe1684f73a85a48bad4a595_amd64",
            "product_identification_helper" : {
              "purl" : "pkg:oci/model-transparency-cli-rhel9@sha256%3A128c46767556694cd8e13fb7f855a26caec64439cfe1684f73a85a48bad4a595?arch=amd64&repository_url=registry.redhat.io/rhtas/model-transparency-cli-rhel9&tag=1793367838"
            }
          }
        } ],
        "category" : "architecture",
        "name" : "amd64"
      }, {
        "branches" : [ {
          "category" : "product_version",
          "name" : "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:da826875042309c0510aebfd4e64e70069c2600e226172623e6726d5de846434_arm64",
          "product" : {
            "name" : "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:da826875042309c0510aebfd4e64e70069c2600e226172623e6726d5de846434_arm64",
            "product_id" : "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:da826875042309c0510aebfd4e64e70069c2600e226172623e6726d5de846434_arm64",
            "product_identification_helper" : {
              "purl" : "pkg:oci/model-transparency-cli-rhel9@sha256%3Ada826875042309c0510aebfd4e64e70069c2600e226172623e6726d5de846434?arch=arm64&repository_url=registry.redhat.io/rhtas/model-transparency-cli-rhel9&tag=1793367838"
            }
          }
        } ],
        "category" : "architecture",
        "name" : "arm64"
      }, {
        "branches" : [ {
          "category" : "product_version",
          "name" : "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:6c8f7b09b649a89a656777e57d5a7ffde23915dffa26c54764a4cbd1b0c2dbcd_ppc64le",
          "product" : {
            "name" : "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:6c8f7b09b649a89a656777e57d5a7ffde23915dffa26c54764a4cbd1b0c2dbcd_ppc64le",
            "product_id" : "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:6c8f7b09b649a89a656777e57d5a7ffde23915dffa26c54764a4cbd1b0c2dbcd_ppc64le",
            "product_identification_helper" : {
              "purl" : "pkg:oci/model-transparency-cli-rhel9@sha256%3A6c8f7b09b649a89a656777e57d5a7ffde23915dffa26c54764a4cbd1b0c2dbcd?arch=ppc64le&repository_url=registry.redhat.io/rhtas/model-transparency-cli-rhel9&tag=1793367838"
            }
          }
        } ],
        "category" : "architecture",
        "name" : "ppc64le"
      }, {
        "branches" : [ {
          "category" : "product_version",
          "name" : "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:dc51182be21257e098de5dacbd158d22b05af0d90dc8f20548e953b30a7e5a74_s390x",
          "product" : {
            "name" : "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:dc51182be21257e098de5dacbd158d22b05af0d90dc8f20548e953b30a7e5a74_s390x",
            "product_id" : "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:dc51182be21257e098de5dacbd158d22b05af0d90dc8f20548e953b30a7e5a74_s390x",
            "product_identification_helper" : {
              "purl" : "pkg:oci/model-transparency-cli-rhel9@sha256%3Adc51182be21257e098de5dacbd158d22b05af0d90dc8f20548e953b30a7e5a74?arch=s390x&repository_url=registry.redhat.io/rhtas/model-transparency-cli-rhel9&tag=1793367838"
            }
          }
        } ],
        "category" : "architecture",
        "name" : "s390x"
      } ],
      "category" : "vendor",
      "name" : "Red Hat"
    } ],
    "relationships" : [ {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:128c46767556694cd8e13fb7f855a26caec64439cfe1684f73a85a48bad4a595_amd64 as a component of Red Hat Trusted Artifact Signer 1.5",
        "product_id" : "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:128c46767556694cd8e13fb7f855a26caec64439cfe1684f73a85a48bad4a595_amd64"
      },
      "product_reference" : "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:128c46767556694cd8e13fb7f855a26caec64439cfe1684f73a85a48bad4a595_amd64",
      "relates_to_product_reference" : "Red Hat Trusted Artifact Signer 1.5"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:6c8f7b09b649a89a656777e57d5a7ffde23915dffa26c54764a4cbd1b0c2dbcd_ppc64le as a component of Red Hat Trusted Artifact Signer 1.5",
        "product_id" : "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:6c8f7b09b649a89a656777e57d5a7ffde23915dffa26c54764a4cbd1b0c2dbcd_ppc64le"
      },
      "product_reference" : "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:6c8f7b09b649a89a656777e57d5a7ffde23915dffa26c54764a4cbd1b0c2dbcd_ppc64le",
      "relates_to_product_reference" : "Red Hat Trusted Artifact Signer 1.5"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:da826875042309c0510aebfd4e64e70069c2600e226172623e6726d5de846434_arm64 as a component of Red Hat Trusted Artifact Signer 1.5",
        "product_id" : "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:da826875042309c0510aebfd4e64e70069c2600e226172623e6726d5de846434_arm64"
      },
      "product_reference" : "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:da826875042309c0510aebfd4e64e70069c2600e226172623e6726d5de846434_arm64",
      "relates_to_product_reference" : "Red Hat Trusted Artifact Signer 1.5"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:dc51182be21257e098de5dacbd158d22b05af0d90dc8f20548e953b30a7e5a74_s390x as a component of Red Hat Trusted Artifact Signer 1.5",
        "product_id" : "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:dc51182be21257e098de5dacbd158d22b05af0d90dc8f20548e953b30a7e5a74_s390x"
      },
      "product_reference" : "registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:dc51182be21257e098de5dacbd158d22b05af0d90dc8f20548e953b30a7e5a74_s390x",
      "relates_to_product_reference" : "Red Hat Trusted Artifact Signer 1.5"
    } ]
  },
  "vulnerabilities" : [ {
    "cve" : "CVE-2026-39834",
    "cwe" : {
      "id" : "CWE-190",
      "name" : "Integer Overflow or Wraparound"
    },
    "discovery_date" : "2026-05-22T04:01:15.681060+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2480676"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in golang.org/x/crypto/ssh. When a remote attacker attempts to write data larger than 4GB in a single call on an SSH (Secure Shell) channel, an integer overflow occurs in the internal payload size calculation. This vulnerability causes the write loop to spin indefinitely, continuously sending empty packets without making progress. The primary consequence is a denial of service (DoS), as the affected system consumes resources and prevents legitimate data transfer.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service due to integer overflow in SSH channel write",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "This vulnerability is rated as having a Moderate impact because triggering the condition requires transmitting an unchunked payload exceeding 4GB in a single operation across an SSH channel, which represents an atypical pattern in standard deployments. In typical Red Hat environments and containerized applications consuming this Go package, network communications and data transfers are handled in significantly smaller buffers, substantially limiting realistic exposure. In the event of exploitation, the blast radius is restricted to process hang and denial of service via an infinite loop, without compromising system confidentiality or data integrity.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:128c46767556694cd8e13fb7f855a26caec64439cfe1684f73a85a48bad4a595_amd64", "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:6c8f7b09b649a89a656777e57d5a7ffde23915dffa26c54764a4cbd1b0c2dbcd_ppc64le", "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:da826875042309c0510aebfd4e64e70069c2600e226172623e6726d5de846434_arm64", "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:dc51182be21257e098de5dacbd158d22b05af0d90dc8f20548e953b30a7e5a74_s390x" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-39834"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2480676",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2480676"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-39834",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-39834"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-39834",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-39834"
    }, {
      "category" : "external",
      "summary" : "https://go.dev/cl/781663",
      "url" : "https://go.dev/cl/781663"
    }, {
      "category" : "external",
      "summary" : "https://go.dev/issue/79567",
      "url" : "https://go.dev/issue/79567"
    }, {
      "category" : "external",
      "summary" : "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
      "url" : "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
    }, {
      "category" : "external",
      "summary" : "https://pkg.go.dev/vuln/GO-2026-5020",
      "url" : "https://pkg.go.dev/vuln/GO-2026-5020"
    } ],
    "release_date" : "2026-05-22T02:31:27.540000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-04T16:05:44+00:00",
      "details" : "The Model Transparency Go CLI Image is a containerized command-line tool for signing and verifying AI/ML workloads against a private Red Hat Trusted Artifact Signer (RHTAS) instance. It lets teams create signatures and attestations for model artifacts and validate them at build or deploy time using enterprise trust material (e.g., Fulcio/Rekor).\n\nFor details on using the Model Transparency Go CLI image, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5/html-single/release_notes/index",
      "product_ids" : [ "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:128c46767556694cd8e13fb7f855a26caec64439cfe1684f73a85a48bad4a595_amd64", "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:6c8f7b09b649a89a656777e57d5a7ffde23915dffa26c54764a4cbd1b0c2dbcd_ppc64le", "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:da826875042309c0510aebfd4e64e70069c2600e226172623e6726d5de846434_arm64", "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:dc51182be21257e098de5dacbd158d22b05af0d90dc8f20548e953b30a7e5a74_s390x" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95263"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "NONE",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "NONE",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
        "version" : "3.1"
      },
      "products" : [ "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:128c46767556694cd8e13fb7f855a26caec64439cfe1684f73a85a48bad4a595_amd64", "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:6c8f7b09b649a89a656777e57d5a7ffde23915dffa26c54764a4cbd1b0c2dbcd_ppc64le", "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:da826875042309c0510aebfd4e64e70069c2600e226172623e6726d5de846434_arm64", "Red Hat Trusted Artifact Signer 1.5:registry.redhat.io/rhtas/model-transparency-cli-rhel9@sha256:dc51182be21257e098de5dacbd158d22b05af0d90dc8f20548e953b30a7e5a74_s390x" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service due to integer overflow in SSH channel write"
  } ]
}