Read the docs
Red Hat Security Advisory

RHSA-2026:30087

Red Hat AI Inference Server 3.3.5 (Spyre)

Released 2026-06-25 · Red Hat rating Critical · View on Red Hat →

Fixed in

Fixes 20 records

Priority HIGH 67

vLLM is an inference and serving engine for large language models (LLMs).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.18287 Published 2026-02-02 Partial fix · 0.14.1 CWE-532
Priority MEDIUM 42

Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `MemoryError` and the decompression instance is re-used.

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00579 Published 2026-04-13 Partial fix · 3.10.21, 3.11.16 +4 CWE-416
Priority LOW 38

In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O (legacy scp protocol) and without -p (pres…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00573 Published 2026-04-02 Partial fix · 10.3 CWE-281
Priority LOW 36

A flaw was found in Poppler's Splash backend.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00252 Published 2026-06-01 Fixed in 24.02.0-7.el10_2.2, 24.02.0-7.el10_0.1 +16 CWE-190