RHSA-2026:95267CriticalCVSS 9.1

Red Hat Security Advisory: RHTAS 1.5.1 - Tech Preview Release Of the Sigstore A2A 0.0.2

Published
November 4, 2026
Last Modified
November 13, 2026

🔗 CVE IDs covered (9)

CVE-2026-97687 →CVE-2026-102267 →CVE-2026-102268 →CVE-2026-63374 →CVE-2026-97689 →CVE-2026-102271 →CVE-2026-102272 →CVE-2026-102273 →CVE-2026-114605 →

📋 Description

CVE-2026-63374 — anyio: AnyIO: TLS certificate spoofing via improper internationalized domain name encoding CVE-2026-97687 — urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override CVE-2026-97689 — urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser CVE-2026-102267 — pyjwt: pyjwt: Verification key substitution via unvalidated JWKS redirects CVE-2026-102268 — pyjwt: PyJWT: Authentication bypass via improper public key validation CVE-2026-102271 — pyjwt: PyJWT: Authentication bypass via acceptance of DER public keys as HMAC secrets CVE-2026-102272 — pyjwt: pyjwt: Token forgery via improper Unicode byte-order mark handling CVE-2026-102273 — pyjwt: pyjwt: Token forgery via acceptance of public JWK containers as HMAC secrets CVE-2026-114605 — dnspython: dnspython: Denial of Service via excessive DNS compression pointer traversal

🎯 Affected products5

  • Red Hat Trusted Artifact Signer 1.5
  • registry.redhat.io/rhtas/rh-sigstore-a2a-rhel9@sha256:1930392647c6089de060b4088db8640c1c576f28c2af2e2e4cbb82ab01740ad1_s390x as a component of Red Hat Trusted Artifact Signer 1.5
  • registry.redhat.io/rhtas/rh-sigstore-a2a-rhel9@sha256:7eada463b6614df33535714150d3b7095ae31ef9752608029ff4c6b43a3dcd8e_amd64 as a component of Red Hat Trusted Artifact Signer 1.5
  • registry.redhat.io/rhtas/rh-sigstore-a2a-rhel9@sha256:820df908c211516640edb090aa0f822ab333caed936dce4112486e4b858add58_arm64 as a component of Red Hat Trusted Artifact Signer 1.5
  • registry.redhat.io/rhtas/rh-sigstore-a2a-rhel9@sha256:e6b82e69b9659949d385c5b0c4047e4e94a3255a77973ec565eeb5e466eb6174_ppc64le as a component of Red Hat Trusted Artifact Signer 1.5

✅ Remediation

The Sigstore A2A image provides a Python library and CLI for keyless signing and verification of A2A Agent Cards using Sigstore with SLSA provenance attestations. It lets teams sign agent cards using short-lived certificates from CI/CD OIDC identity and verify them at build or deploy time, with support for both public Sigstore and private Red Hat Trusted Artifact Signer (RHTAS) instances. For details on using the Sigstore A2A image, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5 You can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.5/html-single/release_notes/index Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (14)