RHSA-2026:3461

Ray is an AI compute engine.

Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the job submission API.

Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow.

A flaw was found in Libtiff.

Starlette is a lightweight ASGI framework/toolkit.

There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available.

A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API.

vLLM is an inference and serving engine for large language models (LLMs).

vLLM is an inference and serving engine for large language models (LLMs).

wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427.

A vulnerability was found in LibTIFF up to 4.7.0.

Vim is an open source, command line text editor.

Vim is an open source, command line text editor.

Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write.

urllib3 is an HTTP client library for Python.

vLLM is an inference and serving engine for large language models (LLMs).

urllib3 is a user-friendly HTTP client library for Python.

Pillow is a Python imaging library.

vLLM is an inference and serving engine for large language models (LLMs).

A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages.

Python-Multipart is a streaming multipart parser for Python.

vLLM is an inference and serving engine for large language models (LLMs).

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but nev…

A flaw was found in the libssh library in versions less than 0.11.2.

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.

urllib3 is a user-friendly HTTP client library for Python.

vLLM is an inference and serving engine for large language models (LLMs).

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.

Fulcio is a free-to-use certificate authority for issuing code signing certificates for an OpenID Connect (OIDC) identity.

runc is a CLI tool for spawning and running containers according to the OCI specification.

vLLM is an inference and serving engine for large language models (LLMs).

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.

An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API.

vLLM is an inference and serving engine for large language models (LLMs).

A Server-Side Request Forgery (SSRF) vulnerability exists in the MediaConnector class within the vLLM project's multimodal feature set.

vLLM is an inference and serving engine for large language models (LLMs).

If the PATH environment variable contains paths which are executables (rather than just directories), passing certain strings to LookPath ("", ".", and ".."), can result in the binaries listed in the PATH being unexpecte…

Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions.

shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on local…