What is RHSA-2025:14474?

RHSA-2025:14474 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: RHTAS 1.2.1- Red Hat Trusted Artifact Signer Release

Which CVE IDs does RHSA-2025:14474 cover?

RHSA-2025:14474 covers the following CVE IDs: CVE-2025-6545, CVE-2025-6547, CVE-2025-9288. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2025:14474?

RHSA-2025:14474 has a CVSS v3 base score of 8.1, published by Red Hat Product Security.

RHSA-2025:14474HighCVSS 8.1

Red Hat Security Advisory: RHTAS 1.2.1- Red Hat Trusted Artifact Signer Release

Vendor

Red Hat Product Security

Published

August 25, 2025

Last Modified

July 19, 2026

🔗 CVE IDs covered (3)

CVE-2025-6545 →CVE-2025-6547 →CVE-2025-9288 →

📋 Description

CVE-2025-6545 — pbkdf2: pbkdf2 silently returns predictable key material CVE-2025-6547 — pbkdf2: pbkdf2 silently returns static keys CVE-2025-9288 — sha.js: Missing type checks leading to hash rewind and passing on crafted data

🔗 References (8)

selfhttps://access.redhat.com/errata/RHSA-2025:14474
externalhttps://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.2
externalhttps://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.2/html-single/release_notes/index
externalhttps://access.redhat.com/security/cve/CVE-2025-6545
externalhttps://access.redhat.com/security/cve/CVE-2025-6547
externalhttps://access.redhat.com/security/cve/CVE-2025-9288
externalhttps://access.redhat.com/security/updates/classification/
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_14474.json