This security advisory addresses a critical vulnerability (CVE-2026-55971, CVSS 9.8) in the Apache Thrift library within the RHEL AI 3.4 RPM runtime. The vulnerability affects Apache Thrift versions prior to 0.24.0. The fix is provided by updating to the patched thrift package version 0.24.0-1.el9ai, which is included in this errata for Red Hat Enterprise Linux AI 3.4 across all supported architectures.
Red Hat Product Errata RHSA-2026:49716 - Security Advisory Issued: 2026-08-03 Updated: 2026-08-03 RHSA-2026:49716 - Security Advisory Overview Updated Packages Synopsis Important: RHEL AI 3.4 RPM runtime CVE fix - thrift Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic AIPCC Security Alerts identified CVEs in the 3.4 release of base-images. The CVE(s) are listed with a severity level of "Important" or higher. Description RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application platform. Solution Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux AI 3.4 x86_64 Red Hat Enterprise Linux AI 3.4 s390x Red Hat Enterprise Linux AI 3.4 ppc64le Red Hat Enterprise Linux AI 3.4 aarch64 Fixes AIPCC-28715 - Add thrift to errata [RHELAI-3.4] CVEs CVE-2026-55971 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux AI 3.4 SRPM thrift-0.24.0-1.el9ai.src.rpm SHA-256: 2737895abfe7aeb644e139d69a051ec64cf52eae85bb851986d05b44ec5793bc x86_64 perl-thrift-0.24.0-1.el9ai.noarch.rpm SHA-256: 15728b411d292e24f755c588f9efe6d1b868773abcc6977dbcd180de19361e50 python3-thrift-0.24.0-1.el9ai.x86_64.rpm SHA-256: 33b20f297a1ab8e900c5652c789380087063bd16cfd032305295ae4808fbb587 python3-thrift-debuginfo-0.24.0-1.el9ai.x86_64.rpm SHA-256: 38e27aa2163e6ae20122ef9c7758f9a6a2c5928d0137148274b025c357ea7b8e thrift-0.24.0-1.el9ai.x86_64.rpm SHA-256: 3e643bf2ff0daa1d9d1c993e93b8c823bf5877ccdb6e0bca539d5d5a6367f617 thrift-debuginfo-0.24.0-1.el9ai.x86_64.rpm SHA-256: cf13608a996b2203d959f44a491135c51cb33b37fe05c959cb9c79fa758a75a0 thrift-debugsource-0.24.0-1.el9ai.x86_64.rpm SHA-256: 76b6aada044410d0f0df0659abb0dc2483e72c44b28725edb27327eca68b0631 thrift-devel-0.24.0-1.el9ai.x86_64.rpm SHA-256: 633cb2a2b7dcdc1218a83aa33fbd47eb95297a49dbbcd07dd4baa28cca16af80 thrift-devel-debuginfo-0.24.0-1.el9ai.x86_64.rpm SHA-256: bbb7bfbc62ae54d034494f24048efab1bca8cb2c320c4b065f80c9b40a0a307e thrift-glib-0.24.0-1.el9ai.x86_64.rpm SHA-256: 984a570d8fe679053f23d9ca872e9bd209c66ca58aec1c10aede5090fcbef0e2 thrift-glib-debuginfo-0.24.0-1.el9ai.x86_64.rpm SHA-256: d526cc1e22754afdbf97878ff1f6858ec33e4025a84bf854b81c709ba9085cf9 thrift-qt-0.24.0-1.el9ai.x86_64.rpm SHA-256: 50600abaa96ec4f5770e1c3921d3e599b62ecdc3467bfc2eb2ed2d663a6b3683 thrift-qt-debuginfo-0.24.0-1.el9ai.x86_64.rpm SHA-256: b5602a1277197dbff7636825c92cff4b961e90b3ebd66338c4961d9a64a8cd3c s390x perl-thrift-0.24.0-1.el9ai.noarch.rpm SHA-256: 15728b411d292e24f755c588f9efe6d1b868773abcc6977dbcd180de19361e50 python3-thrift-0.24.0-1.el9ai.s390x.rpm SHA-256: 494df679ca514156f6c8b2c2891ccce89e9c5a8a21f10cb45eb122ac7ddb48be python3-thrift-debuginfo-0.24.0-1.el9ai.s390x.rpm SHA-256: 5f526fe95ffb8593d8cdadf9ad6bc98bdeff8bf1118a56f04e7ff15ba451928e thrift-0.24.0-1.el9ai.s390x.rpm SHA-256: 691d98243f1fd6c4229a7d90f2a207b5ca4783a434ebdbae3e7f503e211072c0 thrift-debuginfo-0.24.0-1.el9ai.s390x.rpm SHA-256: e893c20ba63913cebcb766cff03fcbdcd4293862b453e8e92ee3796e07e2041c thrift-debugsource-0.24.0-1.el9ai.s390x.rpm SHA-256: 1b6ae02258e735fe80b493b841eae8c3b44da37184da12218c19ea9e64ba0dee thrift-devel-0.24.0-1.el9ai.s390x.rpm SHA-256: cbb4f973adf55dc916a525cb20774307b5471b0271813fda70f9933c5aebb7cd thrift-devel-debuginfo-0.24.0-1.el9ai.s390x.rpm SHA-256: f1e83a0654db541ca7cca25edd4c09d1ce984753babd9051f92bff006ef8ecca thrift-glib-0.24.0-1.el9ai.s390x.rpm SHA-256: 7eb6a4dd64ba103ccb80dee172c362b765ba35d3fac318cdb86e47c64eb0590c thrift-glib-debuginfo-0.24.0-1.el9ai.s390x.rpm SHA-256: 676bdb1235c894361d2b630251b9daf776295ba763d00f1e086de0f5866b43bd thrift-qt-0.24.0-1.el9ai.s390x.rpm SHA-256: 93673966e1ad0ba328a89e9ae33375f2831eb4e31b780a425fa847ae7d7ebaf5 thrift-qt-debuginfo-0.24.0-1.el9ai.s390x.rpm SHA-256: 0e2e8eb771199f6100ec566ebe6992257fbaabecc244d771d98b56ae667282d7 ppc64le perl-thrift-0.24.0-1.el9ai.noarch.rpm SHA-256: 15728b411d292e24f755c588f9efe6d1b868773abcc6977dbcd180de19361e50 python3-thrift-0.24.0-1.el9ai.ppc64le.rpm SHA-256: cc6ce41c118aa3732229a5f709c44beac8a4554709f420f2e1d2c07dccc42aff python3-thrift-debuginfo-0.24.0-1.el9ai.ppc64le.rpm SHA-256: 948f1facadae89d2f07c8cb58cad47b9efb4eaa17c150607c3edaf5683f19347 thrift-0.24.0-1.el9ai.ppc64le.rpm SHA-256: 31fecc8fe499a342c5afe0c0cc8966e19bfd415430bc035fb2b20f3e38c745d7 thrift-debuginfo-0.24.0-1.el9ai.ppc64le.rpm SHA-256: 35bf32eeff4fc001b7acabf7acb5ff2284e7fedc1d0209da9db51943d5cebc04 thrift-debugsource-0.24.0-1.el9ai.ppc64le.rpm SHA-256: 7cf31bdff22720520f9c96e63f6f11413e0e86685ff0f7e7e5b583107528e17d thrift-devel-0.24.0-1.el9ai.ppc64le.rpm SHA-256: b31ea8d3c1da1af36773905c80bd10f242cb47dbc5b0ae14d2e9823ca573a324 thrift-devel-debuginfo-0.24.0-1.el9ai.ppc64le.rpm SHA-256: ed51a2883750bef5dd75a0cb7c8e00b814415cb3151015dd2923d4aa0959e164 thrift-glib-0.24.0-1.el9ai.ppc64le.rpm SHA-256: dc4abe78e3e2d27aa9dfb9320c8d36b929c4a997337c5ab486938ab1ebad724c thrift-glib-debuginfo-0.24.0-1.el9ai.ppc64le.rpm SHA-256: 83ee992faf25f8bf5e31699b7dc56b080533df8f7a2be05c5ca3bad1267d5dc6 thrift-qt-0.24.0-1.el9ai.ppc64le.rpm SHA-256: 766690739321c748c71eab7f49c79b4bc08b999c83c47a918aacc19e5059be53 thrift-qt-debuginfo-0.24.0-1.el9ai.ppc64le.rpm SHA-256: f075c9a123766914f82b40535c55ac1127b610b75870d5cd465fd67312b08bb8 aarch64 perl-thrift-0.24.0-1.el9ai.noarch.rpm SHA-256: 15728b411d292e24f755c588f9efe6d1b868773abcc6977dbcd180de19361e50 python3-thrift-0.24.0-1.el9ai.aarch64.rpm SHA-256: a02134f3357dec4c682788b8444dd590ca4617d2dd743aa4631225832cc2765f python3-thrift-debuginfo-0.24.0-1.el9ai.aarch64.rpm SHA-256: 0a803113e1b94cdaaf2071fc42c8c98ee9e67ff4174b0c9545b323f6e22393be thrift-0.24.0-1.el9ai.aarch64.rpm SHA-256: da2e3f979adf533b570c7121bc0233d1ad26415b61ecba4ffa82e0de04b95f4e thrift-debuginfo-0.24.0-1.el9ai.aarch64.rpm SHA-256: 3e629d6d227451a142d5370b6581c737885f1f7f5a02b408abb7eff80e20dbc0 thrift-debugsource-0.24.0-1.el9ai.aarch64.rpm SHA-256: 14ae1544e1cc37b73934e410aa052b24bf29968ca4b38fea0316aaf933726798 thrift-devel-0.24.0-1.el9ai.aarch64.rpm SHA-256: 18a65d5f96788dfde7cd9ecf3531036b8682ae5a891f2bbbe42d1bf7e257117c thrift-devel-debuginfo-0.24.0-1.el9ai.aarch64.rpm SHA-256: 1faf758fe8b583a5ae6737d47b4d35e3855ab126b8e8206af999eb2d2c7f95c1 thrift-glib-0.24.0-1.el9ai.aarch64.rpm SHA-256: eb72907b738905a46dfd311ad3dce23e34670bf73befae4c118ae432279c831d thrift-glib-debuginfo-0.24.0-1.el9ai.aarch64.rpm SHA-256: bd3082dcc320dcad69292163635a890f7c7d6925692e54614e555c3896d5ff8e thrift-qt-0.24.0-1.el9ai.aarch64.rpm SHA-256: 683087e1952511bef1b658f83f33f5892335d3d1ca8f60598aa1a951d226ac85 thrift-qt-debuginfo-0.24.0-1.el9ai.aarch64.rpm SHA-256: 0ad55fa8b5a57fd8dd7f8176ea9ba3f58ab8ac7c5260b8ffc24ebf1e02a3abaa The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .