RHSA-2026:81171HighCVSS 7.5

Red Hat Security Advisory: Red Hat AI Base Images 3.5.3 (Gaudi)

Published
October 12, 2026
Last Modified
October 13, 2026

🔗 CVE IDs covered (2)

CVE-2026-11940 →CVE-2026-15308 →

📋 Description

CVE-2026-11940 — python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory CVE-2026-15308 — python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations

🎯 Affected products2

  • Red Hat OpenShift AI 3.5
  • registry.redhat.io/rhai/base-image-gaudi-rhel9@sha256:514bcb6c6a6cc2eea803c621cc9e4d0b8e6a75251fa69d8faaa9d678fa9e34c9_amd64 as a component of Red Hat OpenShift AI 3.5

✅ Remediation

For more information visit https://access.redhat.com/errata/RHSA-2026:81171 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (6)