Red Hat Security Advisory

RHSA-2026:43853

Red Hat Enterprise Linux AI 3.3.5

Released 2026-07-22 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AI 3.3 registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9

Fixes 2 records

TI-2026-24810 CVE-2026-32281 · GHSA-gjvh-7jh8-7xhm

Inefficient policy validation in crypto/x509

LOW 39

Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00361 Published 2026-04-08 Partial fix · 1.25.9, 1.26.2 CWE-295

TI-2026-28770 CVE-2026-39892 · GHSA-p423-j2cm-9vmq

cryptography has a buffer overflow if non-contiguous buffers were passed to APIs

LOW 38

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00677 Published 2026-04-08 Partial fix · 46.0.7 CWE-119