Red Hat Security Advisory

RHSA-2026:68639

Red Hat AI Base Images 3.3.3 (TPU)

Released 2026-09-17 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2026-40371 CVE-2026-55969 · GHSA-x8jh-qfcv-fp29

MEDIUM 46

Integer Overflow or Wraparound vulnerability in Apache Thrift C++, c_glib, Go, netstd, Delphi and Haxe bindings.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0103 Published 2026-07-27 Partial fix · 0.24.0 CWE-190

TI-2026-35942 CVE-2026-48586 · GHSA-6h9h-5c4r-fqgf

MEDIUM 46

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0103 Published 2026-07-27 Partial fix · 0.24.0 CWE-409

TI-2026-40573 CVE-2026-56208 · GHSA-mgv2-4j37-m3x6

LOW 36

A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation.

CVSS 3.1HIGH 7.6 Network No auth User interaction EPSS 0.00454 Published 2026-06-19 Partial fix · 140.13.0-1.el10_0, 140.13.0-1.el7_9 +57 CWE-122

TI-2026-40576 CVE-2026-56211 · GHSA-qr4p-j2pf-4w4x

LOW 35

A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00876 Published 2026-06-19 Partial fix · 3.14.0-1.el9ai, 1787860580 +47 CWE-787

TI-2026-40574 CVE-2026-56209 · GHSA-8vmr-q5h8-3vc5

LOW 34

An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00643 Published 2026-06-19 Partial fix · 3.14.0-1.el9ai, 1787860580 +47 CWE-787

TI-2026-40575 CVE-2026-56210 · GHSA-xpjh-7q9g-cgj5

LOW 32

A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00578 Published 2026-06-19 Partial fix · 3.14.0-1.el9ai, 1787860580 +47 CWE-125