Red Hat Security Advisory

RHSA-2026:80769

Red Hat AI Base Images 3.4.4 (CUDA 12.9)

Released 2026-10-12 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9

Fixes 10 records

TI-2026-41775 CVE-2026-58014 · GHSA-h88q-m8mm-7243

Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"

HIGH 76

A flaw was found in GLib.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00558 Published 2026-06-30 Partial fix · 2.88.1, 2.80.4-12.el10_2.21 +94 CWE-193

TI-2026-41772 CVE-2026-58011 · GHSA-8xmh-8wfg-9f6j

Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime

HIGH 72

A flaw was found in GLib.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00474 Published 2026-06-30 Partial fix · 2.86.5, 2.88.1 +87 CWE-125

TI-2026-13117 CVE-2026-15588 · GHSA-hrq7-vgh7-p534

Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering

MEDIUM 57

A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib.

CVSS 3.1MEDIUM 5.3 Local Low privileges No interaction EPSS 0.00579 Published 2026-07-20 Partial fix · 2.80.4-12.el10_2.21, 2.80.4-4.el10_0.17 +87 CWE-770

TI-2026-12884 CVE-2026-15308 · GHSA-7qj2-q5c8-cxx5

Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations

MEDIUM 45

The incremental HTML parser (html.parser.HTMLParser) allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00637 Published 2026-07-09 Partial fix · 3.10.21, 3.11.16 +4 CWE-400

TI-2026-42784 CVE-2026-60002 · GHSA-gp5v-jg37-fvg6

Use after free in OpenBSD OpenSSH

MEDIUM 42

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.003 Published 2026-07-08 Partial fix · 10.4 CWE-416

TI-2026-41773 CVE-2026-58012 · GHSA-vwg8-37h9-g38g

Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

MEDIUM 42

A flaw was found in GLib.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00491 Published 2026-06-30 Partial fix · 2.86.5, 2.88.1 +87 CWE-126

TI-2026-41771 CVE-2026-58010 · GHSA-m7rp-473c-296x

Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()

MEDIUM 42

A flaw was found in GLib.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00491 Published 2026-06-30 Partial fix · 2.86.5, 2.88.1 +87 CWE-126

TI-2026-10297 CVE-2026-11940 · GHSA-9mc4-rqmq-h467

tarfile extraction filter bypass allows escaping the destination directory

MEDIUM 41

tarfile.extractall() with the 'data' or 'tar' filter could be bypassed by a crafted archive where a hardlink references a symlink stored at a deeper name than the hardlink itself.

CVSS 4.0HIGH 7.8 Network No auth No interaction EPSS 0.0075 Published 2026-06-23 Partial fix · 3.10.21, 3.11.16 +4 CWE-22

TI-2026-41774 CVE-2026-58013 · GHSA-4x46-h598-64qr

Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"

LOW 37

A flaw was found in GLib.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.0071 Published 2026-06-30 Partial fix · 2.88.1, 2.80.4-12.el10_2.21 +86 CWE-126

TI-2026-41776 CVE-2026-58015 · GHSA-hmpf-72wc-2r6x

Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive

LOW 34

A flaw was found in GLib.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0084 Published 2026-06-30 Partial fix · 2.88.1, 2.80.4-12.el10_2.21 +91 CWE-22