Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.34 bug fix and security update

Red Hat OpenShift Container Platform release 4.21.34 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

CVE-2026-15915: Files or Directories Accessible to External Parties

IBM Concert 1.0.0 through 3.0.0 could allow a local attacker to obtain sensitive information due to recursive copying of build context directories into container images...

PT-2026-96707

Name of the Vulnerable Software and Affected Versions LibreOffice affected versions not specified Description An out of bounds read occurs during the import of PICT images, which can be embedded in documents. The issue arises when importing an image that utilizes a colour palette, as the palette...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python-urllib3: python3-urllib3+brotli-2.8.0-1.hum1 noarch python3-urllib3+h2-2.8.0-1.hum1 noarch python3-urllib3+socks-2.8.0-1.hum1 noarch python3-urllib3+zstd-2.8.0-1.hum1 noarch...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: jaeger: jaeger-2.20.0-0.11.hum1 aarch64, x8664 jaeger-2.20.0-0.11.hum1.src src...

Important: Red Hat Security Advisory: RHOAI 3.5.1 - Red Hat OpenShift AI

Updated images are now available for Red Hat OpenShift AI. Release of RHOAI 3.5.1 provides these changes:...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: efivar: efivar-39-13.1.hum1 aarch64, x8664 efivar-devel-39-13.1.hum1 aarch64, x8664 efivar-libs-39-13.1.hum1 aarch64, x8664 efivar-39-13.1.hum1.src src Security Fixes: efivar: CVE-2026-6862...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: glibc: compat-libpthread-nonshared-2.43-8.6.hum1 aarch64, x8664 glibc-2.43-8.6.hum1 aarch64, x8664 glibc-all-langpacks-2.43-8.6.hum1 aarch64, x8664 glibc-benchtests-2.43-8.6.hum1 aarch64, x8664...

PT-2026-95918

Name of the Vulnerable Software and Affected Versions The Photo Gallery, Sliders, Proofing and WordPress plugin versions prior to 4.5.0 Description The plugin fails to verify if the user performing an action on an image is the owner of the gallery to which the image belongs. This allows users who...

syft v1.52.0

Syft A CLI tool and Go library for generating a Software Bill of Materials SBOM from container images and filesystems. Exceptional for vulnerability detection when used with a scanner likeGrype. Features Generates SBOMs for container images , filesystems , archives see the docs for a full list of...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.10: python3.10-3.10.21-1.4.hum1 aarch64, x8664 python3.10-debug-3.10.21-1.4.hum1 aarch64, x8664 python3.10-devel-3.10.21-1.4.hum1 aarch64, x8664 python3.10-idle-3.10.21-1.4.hum1 aarch64,...

grype v0.119.0

Grype A vulnerability scanner for container images and filesystems. Features Scan container images , filesystems , and SBOMs for known vulnerabilities see the docs for a full list of supported scan targets Supports major OS package ecosystems Alpine, Debian, Ubuntu, RHEL, Oracle Linux, Amazon...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: loki3.7: loki3.7-3.7.8-0.2.hum1 aarch64, x8664 loki3.7-canary-3.7.8-0.2.hum1 aarch64, x8664 loki3.7-logcli-3.7.8-0.2.hum1 aarch64, x8664 loki3.7-3.7.8-0.2.hum1.src src Security Fixes: loki3.7:...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: loki3.6: loki3.6-3.6.17-0.2.hum1 aarch64, x8664 loki3.6-canary-3.6.17-0.2.hum1 aarch64, x8664 loki3.6-logcli-3.6.17-0.2.hum1 aarch64, x8664 loki3.6-3.6.17-0.2.hum1.src src Security Fixes: loki3.6...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: jaeger: jaeger-2.20.0-0.9.hum1 aarch64, x8664 jaeger-2.20.0-0.9.hum1.src src Security Fixes: jaeger: CVE-2026-81871...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentofu1.12: opentofu1.12-1.12.6-0.3.hum1 aarch64, x8664 opentofu1.12-1.12.6-0.3.hum1.src src Security Fixes: opentofu1.12: CVE-2026-81871...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana12.4: grafana12.4-12.4.10-0.6.hum1 aarch64, x8664 grafana12.4-12.4.10-0.6.hum1.src src Security Fixes: grafana12.4: CVE-2026-61709...

CVE-2026-12106

The Auto Upload Images plugin for WordPress is vulnerable to Limited Server-Side Request Forgery in all versions up to, and including, 3.3.2 via the downloadImage function. This makes it possible for authenticated attackers, with contributor-level access and above, to make web requests to arbitra...

CVE-2026-12106

The Auto Upload Images plugin for WordPress (all versions up to and including 3.3.2 ) is vulnerable to a Limited Server-Side Request Forgery (SSRF) via the downloadImage function. The root cause is the use of wp_remote_get() instead of wp_safe_remote_get(), combined with a validate() method that ...

EUVD-2026-82730

The Auto Upload Images plugin for WordPress is vulnerable to Limited Server-Side Request Forgery in all versions up to, and including, 3.3.2 via the downloadImage function. This makes it possible for authenticated attackers, with contributor-level access and above, to make web requests to arbitra...