Red Hat Security AdvisoryRHSA-2026:19725
Red Hat AI Inference Server 3.2.2 (ROCm)
Released 2026-05-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-rocm-rhel9
Fixes 9 records
Priority HIGH 72
cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) serialization format.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.00397 · Published 2026-03-23 · Partial fix · 5.9.0 CWE-674
Priority MEDIUM 51
A flaw was found in libarchive.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01092 · Published 2026-03-30 · Partial fix · 3.1.2-14.el7_9.2, 3.3.3-7.el8_10 +51 CWE-190
Priority MEDIUM 43
vLLM is an inference and serving engine for large language models (LLMs).
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01369 · Published 2026-03-26 · Partial fix · 0.18.0 CWE-693
Priority MEDIUM 41
A flaw was found in the gdk-pixbuf library.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01148 · Published 2026-03-31 · Partial fix · 2.42.12-4.el10_1.5, 2.42.12-4.el10_2.5 +20 CWE-122
Priority MEDIUM 41
A flaw was found in libarchive.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01287 · Published 2026-03-19 · Partial fix · 3.7.7-8.el10_1, 3.7.7-5.el10_0 +54 CWE-125
Priority MEDIUM 40
nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00823 · Published 2026-03-18 · Fixed in 1.68.1 CWE-617
Priority LOW 33
The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers.
CVSS 4.0HIGH 7.0· Local · No auth · User interaction · EPSS 0.0032 · Published 2026-03-20 · Fixed in 3.10.21, 3.11.16 +4 CWE-20
Priority LOW 24
Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions.
CVSS 4.0LOW 2.7· Network · No auth · No interaction · EPSS 0.02375 · Published 2026-03-12 · Partial fix · 1:10.0p1-5ubuntu5.1, 1:9.6p1-3ubuntu13.15 +1 CWE-908
Priority LOW 22
Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling.
CVSS 3.1MEDIUM 5.1· Local · No auth · No interaction · EPSS 0.00174 · Published 2026-03-10 · Partial fix CWE-415
THREATIST.IORead the docs