live wire
▸AI · Red Hat documents usage-based admission fair sharing for Kueue 1.4 on OpenShiftRed Hat Developer▸AI: Red Hat maps governed firewall changes from ServiceNow through Ansible and two human approval gatesRed Hat Developer▸CLUSTER MGMT · ACM 2.17 makes Submariner 0.24 GA with Important-rated fixesRed Hat Errata▸PLATFORM · Red Hat makes on-premises Lightspeed recommendations GA for Satellite 6.18Red Hat Errata▸SECURITY · Red Hat Hardened Images updates Tomcat 10 for nine authentication, access-control and DoS flawsRed Hat Errata▸AI · Open Data Hub 3.6.0 EA1 bundles Trainer, MLflow and llm-d componentsOpen Data Hub▸AI · Speculators 0.6.0 adds P-EAGLE parallel drafting for vLLM speculative decodingRed Hat Developer▸SECURITY · OpenShift 4.17.57 fixes seven Go and TLS CVEs in an Important-rated updateRed Hat Errata▸AI · Red Hat benchmarks local LLM guardrails with EvalHub, exposing regex accuracy and latency trade-offsRed Hat Developer▸AI · Red Hat maps silent tool-call failures across agentic pipelinesRed Hat▸API · Kuadrant 1.5.3 adds GRPCRoute policies and developer-portal API-key workflowsKuadrant▸AI · (Aug 25) IBM releases Apache-2.0 Granite 4.2 reasoning models in 3B, 8B and 30B sizesIBM Research▸JAVA · Red Hat build of Quarkus 3.33.3.SP1 fixes 13 CVEs in an Important-rated updateRed Hat errata▸AI · vLLM moves Kimi K2 RL weight sync across 384 H100s in 7.53 seconds (Aug 22)vLLM▸AI · Red Hat documents usage-based admission fair sharing for Kueue 1.4 on OpenShiftRed Hat Developer▸AI: Red Hat maps governed firewall changes from ServiceNow through Ansible and two human approval gatesRed Hat Developer▸CLUSTER MGMT · ACM 2.17 makes Submariner 0.24 GA with Important-rated fixesRed Hat Errata▸PLATFORM · Red Hat makes on-premises Lightspeed recommendations GA for Satellite 6.18Red Hat Errata▸SECURITY · Red Hat Hardened Images updates Tomcat 10 for nine authentication, access-control and DoS flawsRed Hat Errata▸AI · Open Data Hub 3.6.0 EA1 bundles Trainer, MLflow and llm-d componentsOpen Data Hub▸AI · Speculators 0.6.0 adds P-EAGLE parallel drafting for vLLM speculative decodingRed Hat Developer▸SECURITY · OpenShift 4.17.57 fixes seven Go and TLS CVEs in an Important-rated updateRed Hat Errata▸AI · Red Hat benchmarks local LLM guardrails with EvalHub, exposing regex accuracy and latency trade-offsRed Hat Developer▸AI · Red Hat maps silent tool-call failures across agentic pipelinesRed Hat▸API · Kuadrant 1.5.3 adds GRPCRoute policies and developer-portal API-key workflowsKuadrant▸AI · (Aug 25) IBM releases Apache-2.0 Granite 4.2 reasoning models in 3B, 8B and 30B sizesIBM Research▸JAVA · Red Hat build of Quarkus 3.33.3.SP1 fixes 13 CVEs in an Important-rated updateRed Hat errata▸AI · vLLM moves Kimi K2 RL weight sync across 384 H100s in 7.53 seconds (Aug 22)vLLM
upstreambeat.ai
releaseAI

Red Hat AI Inference 3.4.4 requires an image-for-image security refresh

Four advisories map the 3.4.4 CPU, CUDA, ROCm and Spyre images to their CVE sets; the practical response is to replace the deployed variant.

By The News Desk· Aug 20, 2026

Red Hat issued four Important-severity advisories for Red Hat AI Inference 3.4.4 on August 20. The advisories are split by accelerator image, so operators should map the image they actually run to the matching advisory rather than treat 3.4.4 as one undifferentiated update.

The advisory-to-image map

The CPU image is covered by RHSA-2026:57380, CUDA by RHSA-2026:57389, ROCm by RHSA-2026:57390 and Spyre by RHSA-2026:57387. CPU, CUDA and ROCm list the same five vulnerabilities: CVE-2026-34753, CVE-2026-34755, CVE-2026-34756, CVE-2026-41523 and CVE-2026-44223.

Spyre includes those five and adds CVE-2026-40192 plus CVE-2026-42308, CVE-2026-42309, CVE-2026-42310 and CVE-2026-42311. That makes the Spyre advisory a ten-CVE update, while each other variant lists five.

What the errata do — and do not — say

Each advisory identifies Red Hat AI Inference Server as the affected product and states that its corresponding 3.4.4 image is available. The public pages do not list separate package fixes, mitigations or workarounds; their Fixes sections say “none.” They therefore support a narrow operational conclusion: this is an image replacement, not a configuration-only mitigation.

The advisory pages also do not provide enough detail to infer exploitability for a particular serving deployment. Operators needing that assessment should follow the individual CVE records and their own exposure model rather than deriving severity from the number of entries alone.

Replacement action

Inventory the image variant and immutable digest used by every Red Hat AI Inference workload. Pull the corresponding 3.4.4 image from the entitled registry, update the deployment reference, and roll the serving pods. Then verify that every replacement pod resolves to the new digest; changing a mutable tag without confirming the running digest is not a reliable completion check.

CPU, CUDA and ROCm deployments share the same published CVE set, but they still have distinct advisories and images. Spyre deployments need the Spyre-specific replacement because its advisory carries the additional five CVEs. Where an organization mirrors images into a disconnected registry, the mirror and deployment reference both need to move before the rollout is complete.

sources

Filed by The News Desk. Corrections: desk@upstreambeat.ai · Our standards →

comments · 0

    Comments are moderated before they appear. Your email is used once to confirm it is you — never shown, never sold. Corrections and questions get an answer from the desk when we have one.

    more from the desk