Red Hat Security Advisory

RHSA-2026:80732

Red Hat AI Base Images 3.3.5 (CPU)

Released 2026-10-12 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-cpu-rhel9

Fixes 3 records

TI-2026-12884 CVE-2026-15308 · GHSA-7qj2-q5c8-cxx5

Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations

MEDIUM 45

The incremental HTML parser (html.parser.HTMLParser) allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00637 Published 2026-07-09 Partial fix · 3.10.21, 3.11.16 +4 CWE-400

TI-2026-46355 CVE-2026-64830 · GHSA-jphx-q7f7-4x8r

FFmpeg 2.1 - 8.1.2 Heap Buffer Overflow via VobSub Subtitle Demuxer

MEDIUM 41

FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declar…

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00646 Published 2026-07-22 Partial fix CWE-122

TI-2026-10297 CVE-2026-11940 · GHSA-9mc4-rqmq-h467

tarfile extraction filter bypass allows escaping the destination directory

MEDIUM 41

tarfile.extractall() with the 'data' or 'tar' filter could be bypassed by a crafted archive where a hardlink references a symlink stored at a deeper name than the hardlink itself.

CVSS 4.0HIGH 7.8 Network No auth No interaction EPSS 0.0075 Published 2026-06-23 Partial fix · 3.10.21, 3.11.16 +4 CWE-22