Threats Tagged 'cve-2026-64830'

Red Hat has issued a security advisory addressing vulnerabilities in the ffmpeg component used within the Red Hat Enterprise Linux AI 3.5 platform. The advisory fixes CVE-2026-8461 and others related to out-of-bounds reads and writes. These vulnerabilities affect internal RPM packages supported only as part of the Red Hat AI application platform. Updated ffmpeg packages are provided to remediate these issues.

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * runc: container escape and denial of service due to arbitrary write gadgets and procfs write redirects (CVE-2025-52881) * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Multiple security vulnerabilities have been identified and fixed in the ffmpeg package as part of the Red Hat Enterprise Linux AI 3.4 update. These include heap buffer overflow, double-free, out-of-bounds memory access, and information disclosure issues affecting various decoders and filters within ffmpeg. The update addresses these issues to improve the security of the ffmpeg runtime environment in RHEL AI 3.4.

The multicluster engine for Kubernetes provides the foundational components that are necessary for the centralized management of multiple Kubernetes-based clusters across data centers, public clouds, and private clouds. You can use the engine to create new Red Hat OpenShift Container Platform clusters or to bring existing Kubernetes-based clusters under management by importing them. After the clusters are managed, you can use the APIs that are provided by the engine to distribute configuration based on placement policy.