What is RHSA-2026:52829?

RHSA-2026:52829 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: RHEL AI 3.4 RPM runtime CVE fix - thrift

Which CVE IDs does RHSA-2026:52829 cover?

RHSA-2026:52829 covers the following CVE IDs: CVE-2026-55971, CVE-2026-58662, CVE-2026-55970. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2026:52829?

RHSA-2026:52829 has a CVSS v3 base score of 8.4, published by Red Hat Product Security.

Which products are affected by RHSA-2026:52829?

RHSA-2026:52829 affects 47 products, including: Red Hat Enterprise Linux AI 3.4 for RHEL 9; perl-thrift-1:0.15.0-6.el9ai.noarch as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9; python3-thrift-1:0.15.0-6.el9ai.aarch64 as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9; python3-thrift-1:0.15.0-6.el9ai.ppc64le as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9; python3-thrift-1:0.15.0-6.el9ai.s390x as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9; and others — see the full list on the advisory page.

RHSA-2026:52829HighCVSS 8.4

Red Hat Security Advisory: RHEL AI 3.4 RPM runtime CVE fix - thrift

Vendor

Red Hat Product Security

Published

August 10, 2026

Last Modified

November 13, 2026

🔗 CVE IDs covered (3)

CVE-2026-55971 →CVE-2026-58662 →CVE-2026-55970 →

📋 Description

CVE-2026-55970 — thrift: Apache Thrift C++ bindings: Information disclosure due to buffer over-read vulnerability CVE-2026-55971 — thrift: Apache Thrift C++ bindings: Remote code execution via heap-based buffer overflow CVE-2026-58662 — Apache Thrift: Apache Thrift C++ bindings: Denial of Service due to out-of-bounds read via improper input validation

🎯 Affected products47

Red Hat Enterprise Linux AI 3.4 for RHEL 9
perl-thrift-1:0.15.0-6.el9ai.noarch as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9
python3-thrift-1:0.15.0-6.el9ai.aarch64 as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9
python3-thrift-1:0.15.0-6.el9ai.ppc64le as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9
python3-thrift-1:0.15.0-6.el9ai.s390x as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9
python3-thrift-1:0.15.0-6.el9ai.x86_64 as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9
python3-thrift-debuginfo-1:0.15.0-6.el9ai.aarch64 as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9
python3-thrift-debuginfo-1:0.15.0-6.el9ai.ppc64le as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9
python3-thrift-debuginfo-1:0.15.0-6.el9ai.s390x as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9
python3-thrift-debuginfo-1:0.15.0-6.el9ai.x86_64 as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9
thrift-1:0.15.0-6.el9ai.aarch64 as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9
thrift-1:0.15.0-6.el9ai.ppc64le as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9
thrift-1:0.15.0-6.el9ai.s390x as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9
thrift-1:0.15.0-6.el9ai.src as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9
thrift-1:0.15.0-6.el9ai.x86_64 as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9
thrift-debuginfo-1:0.15.0-6.el9ai.aarch64 as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9
thrift-debuginfo-1:0.15.0-6.el9ai.ppc64le as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9
thrift-debuginfo-1:0.15.0-6.el9ai.s390x as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9
thrift-debuginfo-1:0.15.0-6.el9ai.x86_64 as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9
thrift-debugsource-1:0.15.0-6.el9ai.aarch64 as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9
thrift-debugsource-1:0.15.0-6.el9ai.ppc64le as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9
thrift-debugsource-1:0.15.0-6.el9ai.s390x as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9
thrift-debugsource-1:0.15.0-6.el9ai.x86_64 as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9
thrift-devel-1:0.15.0-6.el9ai.aarch64 as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9
thrift-devel-1:0.15.0-6.el9ai.ppc64le as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9
thrift-devel-1:0.15.0-6.el9ai.s390x as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9
thrift-devel-1:0.15.0-6.el9ai.x86_64 as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9
thrift-devel-debuginfo-1:0.15.0-6.el9ai.aarch64 as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9
thrift-devel-debuginfo-1:0.15.0-6.el9ai.ppc64le as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9
thrift-devel-debuginfo-1:0.15.0-6.el9ai.s390x as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9
+17 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: No mitigation is available other than upgrading to Apache Thrift 0.24.0 or later, which contains the fix. AIPCC's PyArrow build pipeline is tracked separately for remediation under AIPCC-28667.

🔗 CVE IDs covered (3)

📋 Description

🎯 Affected products47

✅ Remediation

🔗 References (4)