Red Hat Red Hat OpenShift AI 3.0

• CVE-2026-114406 Medium 6.8 Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns 0.3%
• CVE-2026-96889 High 7.8 Librsvg: use-after-free when xml includes have duplicated entities 0.6%
• CVE-2026-96512 High 7.8 Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization 0.3%
• CVE-2026-74860 High 8.5 Libxml2: double-free/uaf in libxml2 python bindings 0.7%
• CVE-2026-15588 Medium 5.3 Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering 0.5%
• CVE-2026-16118 High 7.1 Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c 0.3%
• CVE-2026-58016 High 7.5 Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" 0.6%
• CVE-2026-58013 Medium 6.5 Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" 0.5%
• CVE-2026-58012 Medium 6.5 Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() 0.5%
• CVE-2026-58011 Medium 6.5 Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime 0.5%
• CVE-2026-58010 Medium 6.5 Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() 0.5%
• CVE-2026-14164 High 7.5 Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack() 0.8%
• CVE-2026-12912 High 7.3 Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image 0.4%
• CVE-2026-55655 Medium 5.0 Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions 0.1%
• CVE-2026-55653 Medium 4.3 Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service 0.5%
• CVE-2026-48864 High 7.8 Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data 0.2%
• CVE-2025-13327 Medium 6.3 Uv: uv: specially crafted zip archives lead to arbitrary code execution due to parsing differentials 0.2%
• CVE-2025-12103 Medium 5.0 Openshift-ai: trusty ai grants all authenticated users to list pods in any namespace 0.3%
• CVE-2025-6170 Low 2.5 Libxml2: stack buffer overflow in xmllint interactive shell command handling 0.3%
• CVE-2023-52355 High 7.5 Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom 1.8%