AZL-105128 CVE-2026-88832 affecting package busybox 1.36.1-27

BusyBox romfs volume ID parsing uses unbounded strlen on attacker-controlled metadata, causing a heap buffer overflow when processing crafted filesystem images...

CVE-2026-88832

BusyBox romfs volume ID parsing uses unbounded strlen on attacker-controlled metadata, causing a heap buffer overflow when processing crafted filesystem images...

CVE-2026-88832

BusyBox romfs volume ID parsing uses unbounded strlen on attacker-controlled metadata, causing a heap buffer overflow when processing crafted filesystem images...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.2: grafana13.2-13.2.1-0.6.hum1 aarch64, x8664 grafana13.2-13.2.1-0.6.hum1.src src Security Fixes: grafana13.2: CVE-2026-75838...

CVE-2026-88832 Busybox: busybox: romfs volume id parsing performs unbounded memcpy into fixed-size label buffer, causing heap overflow

BusyBox romfs volume ID parsing uses unbounded strlen on attacker-controlled metadata, causing a heap buffer overflow when processing crafted filesystem images...

EUVD-2026-85426

BusyBox romfs volume ID parsing uses unbounded strlen on attacker-controlled metadata, causing a heap buffer overflow when processing crafted filesystem images...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana12.4: grafana12.4-12.4.10-0.7.hum1 aarch64, x8664 grafana12.4-12.4.10-0.7.hum1.src src Security Fixes: grafana12.4: CVE-2026-75838...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: openssl3: openssl3-devel-3.5.8-1.hum1 aarch64, x8664 openssl3-devel-engine-3.5.8-1.hum1 aarch64, x8664 openssl3-libs-3.5.8-1.hum1 aarch64, x8664 openssl3-3.5.8-1.hum1.src src...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: podman: podman-6.1.2-1.hum1 aarch64, x8664 podman-docker-6.1.2-1.hum1 noarch podman-machine-6.1.2-1.hum1 aarch64, x8664 podman-remote-6.1.2-1.hum1 aarch64, x8664 podmansh-6.1.2-1.hum1 aarch64,...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: php: php-8.5.11-2.hum1 aarch64, x8664 php-bcmath-8.5.11-2.hum1 aarch64, x8664 php-cli-8.5.11-2.hum1 aarch64, x8664 php-common-8.5.11-2.hum1 aarch64, x8664 php-dba-8.5.11-2.hum1 aarch64, x8664...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: openssh: openssh-10.5p1-1.hum1 aarch64, x8664 openssh-askpass-10.5p1-1.hum1 aarch64, x8664 openssh-clients-10.5p1-1.hum1 aarch64, x8664 openssh-keycat-10.5p1-1.hum1 aarch64, x8664...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: pgbouncer: pgbouncer-1.26.0-0.1.hum1 aarch64, x8664 pgbouncer-1.26.0-0.1.hum1.src src...

Critical: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: openshell: openshell-0.0.116-0.2.hum1 aarch64, x8664 openshell-gateway-0.0.116-0.2.hum1 aarch64, x8664 python3-openshell-0.0.116-0.2.hum1 aarch64, x8664 openshell-0.0.116-0.2.hum1.src src...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: skopeo: skopeo-1.24.1-1.hum1 aarch64, x8664 skopeo-tests-1.24.1-1.hum1 aarch64, x8664 skopeo-1.24.1-1.hum1.src src...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: buildah: buildah-1.45.1-1.hum1 aarch64, x8664 buildah-1.45.1-1.hum1.src src...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.48 bug fix and security update

Red Hat OpenShift Container Platform release 4.19.48 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...

EUVD-2026-84875

IBM Concert 1.0.0 through 3.0.0 could allow a local attacker to obtain sensitive information due to recursive copying of build context directories into container images...

CVE-2026-88832: Out-of-bounds Write

BusyBox romfs volume ID parsing uses unbounded strlen on attacker-controlled metadata, causing a heap buffer overflow when processing crafted filesystem images...

PT-2026-105034

BusyBox romfs volume ID parsing uses unbounded strlen on attacker-controlled metadata, causing a heap buffer overflow when processing crafted filesystem images...

The vulnerability of the `unpack_32bit()` function in software for storing OpenEXR images with a wide dynamic range of brightness levels allows a hacker to cause a service failure.

The vulnerability of the unpack32bit function in software for storing OpenEXR images with a wide dynamic range of brightness levels is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...