RHSA-2026:6926HighCVSS 9.1

Red Hat Security Advisory: Red Hat Quay 3.9.20

Published
April 7, 2026
Last Modified
August 24, 2026

🔗 CVE IDs covered (8)

CVE-2026-4602 →CVE-2026-29063 →CVE-2026-29074 →CVE-2026-30922 →CVE-2026-32597 →CVE-2026-4599 →CVE-2026-4600 →CVE-2026-4601 →

📋 Description

CVE-2026-4599 — jsrsasign: jsrsasign: Private key recovery via incomplete comparison checks biasing DSA nonces CVE-2026-4600 — jsrsasign: jsrsasign: Cryptographic signature forgery via malicious DSA domain parameters CVE-2026-4601 — jsrsasign: jsrsasign: Private Key Recovery via Missing Cryptographic Step in DSA Signing CVE-2026-4602 — jsrsasign: jsrsasign: Signature verification bypass via negative exponent handling CVE-2026-29063 — immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution CVE-2026-29074 — svgo: SVGO: Denial of Service via XML entity expansion CVE-2026-30922 — pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion CVE-2026-32597 — pyjwt: PyJWT accepts unknown crit header extensions (RFC 7515 §4.1.11 MUST violation)

🎯 Affected products23

  • Red Hat Quay 3.9
  • registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le as a component of Red Hat Quay 3.9
  • registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64 as a component of Red Hat Quay 3.9
  • registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x as a component of Red Hat Quay 3.9
  • registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64 as a component of Red Hat Quay 3.9
  • registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x as a component of Red Hat Quay 3.9
  • registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64 as a component of Red Hat Quay 3.9
  • registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le as a component of Red Hat Quay 3.9
  • registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64 as a component of Red Hat Quay 3.9
  • registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x as a component of Red Hat Quay 3.9
  • registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le as a component of Red Hat Quay 3.9
  • registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64 as a component of Red Hat Quay 3.9
  • registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64 as a component of Red Hat Quay 3.9
  • registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x as a component of Red Hat Quay 3.9
  • registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64 as a component of Red Hat Quay 3.9
  • registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le as a component of Red Hat Quay 3.9
  • registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64 as a component of Red Hat Quay 3.9
  • registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64 as a component of Red Hat Quay 3.9
  • registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x as a component of Red Hat Quay 3.9
  • registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le as a component of Red Hat Quay 3.9
  • registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le as a component of Red Hat Quay 3.9
  • registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x as a component of Red Hat Quay 3.9
  • registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64 as a component of Red Hat Quay 3.9

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (11)