RHSA-2026:94455HighCVSS 9.1

Red Hat Security Advisory: Red Hat AI Base Images 3.4.7 (CPU)

Published
November 3, 2026
Last Modified
November 9, 2026

🔗 CVE IDs covered (3)

CVE-2026-44172 →CVE-2026-96889 →CVE-2026-111497 →

📋 Description

CVE-2026-44172 — mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string() CVE-2026-96889 — librsvg: Use-after-free when XML includes have duplicated entities CVE-2026-111497 — brotli: Out-of-Bounds Write in Google Brotli Decoder

🎯 Affected products5

  • Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhai/base-image-cpu-rhel9@sha256:0e7b9473fc5d111cfee36d97fb23a26f612ec4d58b22ec53c2e7a919db4ee5b6_amd64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhai/base-image-cpu-rhel9@sha256:441c49ccb09fe1239fb6ace6a4cda2a3d53469dfef5a2a5d6a736fe21df894e8_arm64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhai/base-image-cpu-rhel9@sha256:87d149e24b06d051bade82c31654df5affcde6320c8dc39e8536ce29478d813b_s390x as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhai/base-image-cpu-rhel9@sha256:a76b9556e65ce0dc0e1e52377acb355b8ce7e2f621a36c0fef07a9062e42f7cb_ppc64le as a component of Red Hat OpenShift AI 3.4

✅ Remediation

For more information visit https://access.redhat.com/errata/RHSA-2026:94455 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: See the security bulletin for a detailed mitigation procedure.

🔗 References (7)