RHSA-2026:94469HighCVSS 9.1

Red Hat Security Advisory: Red Hat AI Base Images 3.4.7 (CUDA 12.9)

Published
November 3, 2026
Last Modified
November 9, 2026

🔗 CVE IDs covered (3)

CVE-2026-44172 →CVE-2026-96889 →CVE-2026-111497 →

📋 Description

CVE-2026-44172 — mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string() CVE-2026-96889 — librsvg: Use-after-free when XML includes have duplicated entities CVE-2026-111497 — brotli: Out-of-Bounds Write in Google Brotli Decoder

🎯 Affected products3

  • Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:74a914a148a2ccb6d3d6027e36e4daac71d967dcd4c9da278d981ad7ea1ce2f2_amd64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:d2c50a7e8b5838ccd0a9b2eb961053e536aa06e33872b120b25eeb07dbb7fca8_arm64 as a component of Red Hat OpenShift AI 3.4

✅ Remediation

For more information visit https://access.redhat.com/errata/RHSA-2026:94469 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: See the security bulletin for a detailed mitigation procedure.

🔗 References (7)