Red Hat Enterprise Linux AI (RHEL AI) 3/redhat-user-workloads/bootc-rocm-azure-3-3

Red Hat · Package

7 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Cryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIsCVE-2026-39892 · GHSA-P423-J2CM-9VMQVersion ranges need review.	cryptography Lightspeed Core/openshift-lightspeed-tech-preview/lightspeed-rag-tool-rhel9	PyPIRed Hat	Medium	Fix reported	2026-11-04
HuggingFace Transformers allows for arbitrary code execution in the `Trainer` classCVE-2026-1839 · GHSA-69W3-R845-3855Version ranges need review.	transformers Lightspeed Core/openshift-lightspeed-tech-preview/lightspeed-rag-tool-rhel9	PyPIRed Hat	Medium	Fix reported	2026-09-10
python: Python: HTTP header injection via CR/LF in proxy tunnel headersCVE-2026-1502	Red Hat Enterprise Linux 6/python Red Hat Enterprise Linux 7/python3	Red Hat	Medium	No fix reported	Not recorded
FFmpeg: FFmpeg: Denial of Service vulnerability in zmqsend.c via crafted inputCVE-2026-30998	Lightspeed Core/openshift-lightspeed-tech-preview/lightspeed-rag-tool-rhel9 Red Hat Enterprise Linux AI (RHEL AI) 3/ffmpeg	Red Hat	Medium	No fix reported	Not recorded
FFmpeg: FFmpeg: Denial of Service via heap buffer overflow in av_bprint_finalize()CVE-2026-30999	Lightspeed Core/openshift-lightspeed-tech-preview/lightspeed-rag-tool-rhel9 Red Hat Enterprise Linux AI (RHEL AI) 3/ffmpeg	Red Hat	Medium	No fix reported	Not recorded
FFmpeg: FFmpeg: Denial of Service via out-of-bounds readCVE-2026-30997	Lightspeed Core/openshift-lightspeed-tech-preview/lightspeed-rag-tool-rhel9 Red Hat Enterprise Linux AI (RHEL AI) 3/ffmpeg	Red Hat	Medium	No fix reported	Not recorded
python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modulesCVE-2026-6100	Red Hat Enterprise Linux 6/python Red Hat Enterprise Linux 7/python	Red Hat	High	No fix reported	Not recorded