Red Hat Security AdvisoryRHSA-2026:82759
Red Hat AI Base Images 3.2.5 (CPU)
Released 2026-10-14 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-cpu-rhel9
Fixes 8 records
Priority MEDIUM 43
An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the MagicYUV decoder, allows denial-of-service and, in some cases, can be exploited for remote code execution.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01572 · Published 2026-06-18 · Partial fix · 8.1.2 CWE-787
Priority MEDIUM 41
FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryption) subsample data to libavformat/mov.c.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00134 · Published 2026-04-16 · Partial fix · 8.1 CWE-190
Priority LOW 35
sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00291 · Published 2026-07-08 · Partial fix · 10.4 CWE-770
Priority LOW 32
In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00159 · Published 2026-07-08 · Partial fix · 10.4 CWE-348
Priority LOW 29
A flaw was found in OpenSSH.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0053 · Published 2026-06-23 · Partial fix · 9.9p1-25.el10_2, 9.9p1-7.el10_0.5 +46 CWE-415
Priority LOW 26
A flaw was found in OpenSSH.
CVSS 3.1MEDIUM 6.1· Local · No auth · User interaction · EPSS 0.00124 · Published 2026-06-23 · Partial fix · 9.9p1-25.el10_2, 9.9p1-7.el10_0.5 +46 CWE-923
Priority LOW 24
scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations.
CVSS 3.1MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.0025 · Published 2026-07-08 · Partial fix · 10.4 CWE-23
Priority LOW 24
sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controlled server.
CVSS 3.1MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.0025 · Published 2026-07-08 · Partial fix · 10.4 CWE-23
THREATIST.IORead the docs