Red Hat Security AdvisoryRHSA-2026:4128
Red Hat AI Inference Server Model Optimization Tools 3.2.2 (CUDA)
Released 2026-03-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/model-opt-cuda-rhel9
Fixes 9 records
Priority MEDIUM 62
libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpeg_l3_encode.c mpeg_l3_encoder_close.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0054 · Published 2024-10-27 · Partial fix CWE-617
Priority MEDIUM 45
Pillow is a Python imaging library.
CVSS 4.0HIGH 8.6· Local · No auth · No interaction · EPSS 0.00403 · Published 2026-02-11 · Partial fix · 12.1.1 CWE-787
Priority MEDIUM 44
A too-short encoded message can cause a panic in Float.GobDecode and Rat GobDecode in math/big in Go before 1.17.13 and 1.18.5, potentially allowing a denial of service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02781 · Published 2022-08-09 · Partial fix · 1.17.13, 1.18.5
Priority LOW 36
An issue was discovered in giflib through 5.1.4.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.02237 · Published 2021-04-21 · Partial fix CWE-125
Priority LOW 30
A flaw was found in OpenJPEG.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00588 · Published 2024-07-13 · Partial fix · 1772713830 CWE-400
Priority LOW 28
A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate chain.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00556 · Published 2025-01-28 · Partial fix · 1.22.11, 1.23.5 +1
Priority LOW 26
A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx.
CVSS 4.0MEDIUM 5.7· Local · Low privileges · User interaction · EPSS 0.00365 · Published 2024-05-27 · Partial fix · 1.13.1 CWE-122
Priority LOW 21
A flaw was found in OpenJPEG.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00555 · Published 2024-07-13 · Partial fix · 1772713830 CWE-400
Priority LOW 16
The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are used.
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.00438 · Published 2022-06-05 · Partial fix CWE-330
THREATIST.IORead the docs