live wire
▸Red Hat ships important MicroShift 4.16.73 security updateRed Hat Product Errata▸AI · Red Hat maps local AI Inference serving and load tests on RHEL (Oct. 15)Red Hat Emerging Technologies▸PLATFORM · IBM guide maps Secure Execution VMs onto OpenShift Virtualization for LinuxONEIBM Community▸AI · vLLM maps Nemotron 3.5 Super VL across Hopper, Blackwell and Red Hat DSpark (Oct. 15)vLLM Recipes▸AI · AWS contributes push-based KV transfer to vLLM, reporting 3x better TTFT under loadAWS Machine Learning Blog▸AI · AWS contributes bidirectional KV transfer to vLLM, cutting multi-turn TTFT up to 3.3xAWS Machine Learning Blog▸AI · vLLM Semantic Router adds d3-turbo with box and video-tracking decisionsvLLM Semantic Router▸IDENTITY · Keycloak DevDay 2027 opens call for deep technical talks through Oct. 24Keycloak▸AI · vLLM Recipes maps Muse Spark Open to single-node Blackwell and AMD deployment (Oct. 16)vLLM▸PLATFORM · Clang 23 bytecode interpreter cuts allocations and expands constant-expression supportRed Hat Developer▸PLATFORM · RHEL becomes first-party on OCI; OpenShift subscriptions reach Oracle MarketplaceRed Hat▸AI · vLLM-Omni merges native MOSS-Image serving with parallelism and offloadvLLM▸AI · vLLM adds System One endpoint for Decision 3.0 multimodal routing models (Oct. 15)vLLM▸SECURITY · Red Hat rates OpenShift AI 3.4.5 update Critical; advisory lists hundreds of CVEsRed Hat Product Security▸Red Hat ships important MicroShift 4.16.73 security updateRed Hat Product Errata▸AI · Red Hat maps local AI Inference serving and load tests on RHEL (Oct. 15)Red Hat Emerging Technologies▸PLATFORM · IBM guide maps Secure Execution VMs onto OpenShift Virtualization for LinuxONEIBM Community▸AI · vLLM maps Nemotron 3.5 Super VL across Hopper, Blackwell and Red Hat DSpark (Oct. 15)vLLM Recipes▸AI · AWS contributes push-based KV transfer to vLLM, reporting 3x better TTFT under loadAWS Machine Learning Blog▸AI · AWS contributes bidirectional KV transfer to vLLM, cutting multi-turn TTFT up to 3.3xAWS Machine Learning Blog▸AI · vLLM Semantic Router adds d3-turbo with box and video-tracking decisionsvLLM Semantic Router▸IDENTITY · Keycloak DevDay 2027 opens call for deep technical talks through Oct. 24Keycloak▸AI · vLLM Recipes maps Muse Spark Open to single-node Blackwell and AMD deployment (Oct. 16)vLLM▸PLATFORM · Clang 23 bytecode interpreter cuts allocations and expands constant-expression supportRed Hat Developer▸PLATFORM · RHEL becomes first-party on OCI; OpenShift subscriptions reach Oracle MarketplaceRed Hat▸AI · vLLM-Omni merges native MOSS-Image serving with parallelism and offloadvLLM▸AI · vLLM adds System One endpoint for Decision 3.0 multimodal routing models (Oct. 15)vLLM▸SECURITY · Red Hat rates OpenShift AI 3.4.5 update Critical; advisory lists hundreds of CVEsRed Hat Product Security
upstreambeat.ai
newsSECURITY

OpenShift AI 3.4.5 ships as a Critical security update with 298 listed CVEs

Red Hat has published updated images, but the linked 3.4 release notes still describe 3.4.4 and the advisory says upgrade documentation will be refreshed shortly.

By The News Desk· Oct 19, 2026the quick take — two AI hosts go live when you do

Red Hat has issued a Critical security advisory for Red Hat OpenShift AI 3.4.5, publishing updated images and directing administrators to the OpenShift AI documentation for upgrade instructions. The October 19 advisory lists 298 CVEs.

What changed

RHSA-2026:84734 identifies the update as “RHOAI 3.4.5 - Red Hat OpenShift AI” and rates it Critical. The advisory does not provide per-component change notes or name one vulnerability as the reason for the overall rating; instead, it publishes a long consolidated CVE list and points to updated product images.

That distinction matters operationally. The rating is enough to make the update urgent, but the advisory alone does not support conclusions about a single exploit path, affected deployment pattern or mitigation. Teams should avoid inferring those details from the CVE count.

Who is affected

The advisory names Red Hat OpenShift AI as the affected product and specifically packages the fix as version 3.4.5. Administrators maintaining the 3.4 line should treat this as the relevant update notice and review their installed version against the new images.

There is a documentation timing gap at publication. Red Hat says the OpenShift AI documentation “will be updated shortly” with important upgrade instructions. The current 3.4 release-notes landing page still says it covers version 3.4.4.

What to do

Platform teams should identify OpenShift AI 3.4 deployments, open the advisory for the authoritative image and CVE list, and watch the linked product documentation for the promised 3.4.5 upgrade procedure. Because the release notes have not yet caught up, this is a case for following Red Hat’s published upgrade instructions when they appear rather than improvising from the advisory’s package list.

This desk found no claim in the advisory that the listed vulnerabilities are being exploited in the wild. The story clears the security threshold because Red Hat rates the update Critical, not because exploitation has been established.

sources

Filed by The News Desk. Corrections: desk@upstreambeat.ai · Our standards →

comments · 0

    Comments are moderated before they appear. Your email is used once to confirm it is you — never shown, never sold. Corrections and questions get an answer from the desk when we have one.

    more from the desk