GHSA-R543-Q48M-4C9J WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCE

Summary This was found during a pentest, funded by the NLNnet foundation, conducted by Stefan Vink from Radically Open Security and the only High issue found. WeasyPrint passes fetched image bytes directly to Pillow's generic format dispatcher without restricting the input format. When Ghostscrip...

CVE-2026-106565 ImageMagick: Infinite Loop in bzip2 compressed images.

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a missing end-of-file check while reading bzip2-compressed image data can cause an infinite loop and exhaust processing resources. This issue is fixed in versions 7.1.2-...

CVE-2026-106565 ImageMagick: Infinite Loop in bzip2 compressed images.

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a missing end-of-file check while reading bzip2-compressed image data can cause an infinite loop and exhaust processing resources. This issue is fixed in versions 7.1.2-...

CVE-2026-106565

The ImageMagick image manipulation software contains a vulnerability where a missing end-of-file check while processing bzip2-compressed image data can trigger an infinite loop . This flaw allows for the exhaustion of processing resources , potentially impacting system availability. The issue is ...

Low: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: cups: cups-2.4.19-4.3.hum1 aarch64, x8664 cups-client-2.4.19-4.3.hum1 aarch64, x8664 cups-devel-2.4.19-4.3.hum1 aarch64, x8664 cups-filesystem-2.4.19-4.3.hum1 noarch cups-ipptool-2.4.19-4.3.hum1...

Low: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: gnupg2: gnupg2-2.4.9-18.1.hum1 aarch64, x8664 gnupg2-dirmngr-2.4.9-18.1.hum1 aarch64, x8664 gnupg2-g13-2.4.9-18.1.hum1 aarch64, x8664 gnupg2-gpg-agent-2.4.9-18.1.hum1 aarch64, x8664...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: curl: curl-8.22.0-1.1.hum1 aarch64, s390x, x8664 libcurl-8.22.0-1.1.hum1 aarch64, s390x, x8664 libcurl-devel-8.22.0-1.1.hum1 aarch64, s390x, x8664 libcurl-minimal-8.22.0-1.1.hum1 aarch64, s390x,...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: expat: expat-2.8.5-1.1.hum1 aarch64, s390x, x8664 expat-devel-2.8.5-1.1.hum1 aarch64, s390x, x8664 expat-static-2.8.5-1.1.hum1 aarch64, s390x, x8664 expat-2.8.5-1.1.hum1.src src...

CVE-2026-106443

The web tool WeasyPrint (prior to version 70.0 ) is vulnerable to Remote Code Execution (RCE) due to improper input validation in the weasyprint/images.py component. The software passes image bytes from HTML URLs, CSS values, SVG references, and data URIs to Pillow's image dispatcher without filt...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: dotnet8.0: aspnetcore-runtime-8.0-8.0.31-0.1.hum1 aarch64, x8664 aspnetcore-runtime-dbg-8.0-8.0.31-0.1.hum1 aarch64, x8664 aspnetcore-targeting-pack-8.0-8.0.31-0.1.hum1 aarch64, x8664...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: dotnet9.0: aspnetcore-runtime-9.0-9.0.20-0.1.hum1 aarch64, x8664 aspnetcore-runtime-dbg-9.0-9.0.20-0.1.hum1 aarch64, x8664 aspnetcore-targeting-pack-9.0-9.0.20-0.1.hum1 aarch64, x8664...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: jaeger: jaeger-2.21.0-0.1.hum1 aarch64, x8664 jaeger-2.21.0-0.1.hum1.src src...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19 CNF IBU extras update

An update for ibu components is available for Red Hat OpenShift Container Platform 4.19. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the extra ibu container...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana12.4: grafana12.4-12.4.12-0.4.hum1 aarch64, x8664 grafana12.4-12.4.12-0.4.hum1.src src...

CVE-2026-25302

A cryptographic issue exists during the processing of non-ELF partitions , where authentication and signature checks are bypassed. This allows unsigned or corrupted images to be mounted and processed. The vulnerability is associated with Qualcomm hardware/software as indicated by the CVSS source....

CVE-2026-25302 Improper Verification of Cryptographic Signature in Boot

Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed...

Path Traversal

Docling is vulnerable to Path Traversal. The vulnerability is due to improper validation and confinement of attacker-controlled xlink:href filesystem paths when processing ODF images, which allows an attacker to access arbitrary readable files and potentially disclose their contents through...

CVE-2026-25302: Improper Verification of Cryptographic Signature

Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed...

PT-2026-106352

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A cryptographic issue occurs when processing non-ELF Executable and Linkable Format partitions. This flaw allows authentication and signature checks to be...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.1: grafana13.1-13.1.7-0.1.hum1 aarch64, x8664 grafana13.1-13.1.7-0.1.hum1.src src...