RHSA-2026:6720HighCVSS 9.1

Red Hat Security Advisory: Red Hat Quay 3.12.16

Published
April 6, 2026
Last Modified
August 24, 2026

🔗 CVE IDs covered (10)

CVE-2026-4600 →CVE-2026-4601 →CVE-2026-4602 →CVE-2026-28498 →CVE-2026-30922 →CVE-2026-32597 →CVE-2026-4598 →CVE-2026-4599 →CVE-2026-25679 →CVE-2026-29063 →

📋 Description

CVE-2026-4598 — jsrsasign: jsrsasign: Denial of Service via infinite loop in bnModInverse function with crafted inputs CVE-2026-4599 — jsrsasign: jsrsasign: Private key recovery via incomplete comparison checks biasing DSA nonces CVE-2026-4600 — jsrsasign: jsrsasign: Cryptographic signature forgery via malicious DSA domain parameters CVE-2026-4601 — jsrsasign: jsrsasign: Private Key Recovery via Missing Cryptographic Step in DSA Signing CVE-2026-4602 — jsrsasign: jsrsasign: Signature verification bypass via negative exponent handling CVE-2026-25679 — net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-28498 — authlib: Authlib: Authentication bypass via forged OpenID Connect ID Tokens CVE-2026-29063 — immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution CVE-2026-30922 — pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion CVE-2026-32597 — pyjwt: PyJWT accepts unknown crit header extensions (RFC 7515 §4.1.11 MUST violation)

🎯 Affected products29

  • Red Hat Quay 3.12
  • registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64 as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64 as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64 as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64 as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64 as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64 as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64 as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64 as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64 as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64 as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64 as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64 as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64 as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64 as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64 as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64 as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le as a component of Red Hat Quay 3.12

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (13)