RHSA-2026:99011CriticalCVSS 9.1

Red Hat Security Advisory: RHTAS 1.4.5 - Release of Model Transparency 1.0.7

Published
November 11, 2026
Last Modified
November 13, 2026

🔗 CVE IDs covered (9)

CVE-2026-102268 →CVE-2026-119194 →CVE-2026-119195 →CVE-2026-119196 →CVE-2026-102271 →CVE-2026-102272 →CVE-2026-102273 →CVE-2026-114605 →CVE-2026-119197 →

📋 Description

CVE-2026-102268 — pyjwt: PyJWT: Authentication bypass via improper public key validation CVE-2026-102271 — pyjwt: PyJWT: Authentication bypass via acceptance of DER public keys as HMAC secrets CVE-2026-102272 — pyjwt: pyjwt: Token forgery via improper Unicode byte-order mark handling CVE-2026-102273 — pyjwt: pyjwt: Token forgery via acceptance of public JWK containers as HMAC secrets CVE-2026-114605 — dnspython: dnspython: Denial of Service via excessive DNS compression pointer traversal CVE-2026-119194 — pyasn1: pyasn1: Denial of Service via hash collisions in schemaless decoding CVE-2026-119195 — pyasn1: pyasn1: Denial of Service via quadratic processing of fragmented ASN.1 data CVE-2026-119196 — pyasn1: pyasn1: Denial of Service via constructed bit string decoding CVE-2026-119197 — pyasn1: pyasn1: Denial of Service via quadratic complexity in binary REAL decoding

🎯 Affected products3

  • Red Hat Trusted Artifact Signer 1.4
  • registry.redhat.io/rhtas/model-transparency-rhel9@sha256:a1188170f0044a2d82748d07ec0b363fdc9cc1f96c762d6bd0fb31a0889c3ad5_arm64 as a component of Red Hat Trusted Artifact Signer 1.4
  • registry.redhat.io/rhtas/model-transparency-rhel9@sha256:f42b8e29a9a21697a7347717b9e966c293411a3dcce1ab5e21e98f85ad294242_amd64 as a component of Red Hat Trusted Artifact Signer 1.4

✅ Remediation

The Model Transparency CLI Image is a containerized command-line tool for signing and verifying AI/ML workloads against a private Red Hat Trusted Artifact Signer (RHTAS) instance. It lets teams create signatures and attestations for model artifacts and validate them at build or deploy time using enterprise trust material (e.g., Fulcio/Rekor). For details on using the Model Transparency CLI image, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4 You can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Workaround: --- CME Mitigation Guidance (2026-11-03) --- Disclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from https://cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure. The highest-value action is to eliminate iterative per-octet bit-shifting and byte slicing in pyasn1 binary REAL mantissa decoding in favor of linear-time integer conversion: upgrade to pyasn1 0.6.5 (or the corresponding fixed Red Hat builds), which replace the iterative per-octet shifting, bitwise OR, and byte slicing loop with a single linear-time int.from_bytes call, closing crafted ASN.1 payload containing binary-encoded REAL with a large mantissa. Until patched, this is a concern on Applications parsing untrusted ASN.1 input with pyasn1 BER, CER, or DER decoding, so Reject or strictly enforce size limits on untrusted ASN.1 inputs that may contain REAL values. As a compensating measure, Enforce RLIMIT_CPU limits on decoding processes using ulimit or prlimit to terminate workers trapped in quadratic bit-shifting and slicing loops, Impose parsing timeouts or computational limits on decoding operations to bound worker hang time from quadratic mantissa processing, and Throttle client request volume and connections to impede sustained CPU starvation across worker threads. These controls limit blast radius and contain exploitation, but they do not fix the underlying quadratic complexity defect — apply the upstream patch to fully remediate. Highest-impact CME: CME-114 Process Resource Limits (ulimit/prlimit) (medium)

🔗 References (14)