Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: spire1.15: spire1.15-1.15.2-0.3.hum1 aarch64, x8664 spire1.15-agent-1.15.2-0.3.hum1 aarch64, x8664 spire1.15-oidc-discovery-provider-1.15.2-0.3.hum1 aarch64, x8664 spire1.15-server-1.15.2-0.3.hum...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: podman: podman-6.0.2-2.1.hum1 aarch64, x8664 podman-docker-6.0.2-2.1.hum1 noarch podman-machine-6.0.2-2.1.hum1 aarch64, x8664 podman-remote-6.0.2-2.1.hum1 aarch64, x8664 podman-tests-6.0.2-2.1.hu...

Next.js: Denial of Service in the Image Optimization API using SVGs

Impact When self-hosting Next.js with the default image loader, the Image Optimization API can optimize remotely hosted images if configured not enabled by default. If those images contain malicious content, they can cause CPU exhaustion in /next/image endpoints. - If you are using...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure via the processing of embedded SVG images containing elements with xlink:href attributes referencing local files or directories. An attacker can determine the existence of files or directories on the server by...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python-jinja2: python3-jinja2+i18n-3.1.6-10.1.hum1 noarch python3-jinja2-3.1.6-10.1.hum1 noarch python-jinja2-3.1.6-10.1.hum1.src src...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: kubernetes1.36: kubernetes1.36-1.36.2-6.1.hum1 aarch64, x8664 kubernetes1.36-client-1.36.2-6.1.hum1 aarch64, x8664 kubernetes1.36-kubeadm-1.36.2-6.1.hum1 aarch64, x8664...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: hugo: hugo-0.164.0-0.1.2.hum1 aarch64, x8664 hugo-0.164.0-0.1.2.hum1.src src Security Fixes: hugo: CVE-2026-56852...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: prometheus3.13: prometheus3.13-3.13.1-0.3.hum1 aarch64, x8664 prometheus3.13-3.13.1-0.3.hum1.src src Security Fixes: prometheus3.13: CVE-2026-56852...

Allocation of Resources Without Limits or Throttling

Overview elgg/elgg is a development framework used for creating socially aware web applications. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the avatar upload process. An attacker can cause resource exhaustion by uploading an image...

Important: Red Hat Security Advisory: Red Hat Enterprise Linux AI 3.3.5

Updated Red Hat Enterprise Linux AI 3.3.5 container images are now available. Red Hat® Enterprise Linux® AI is a foundation model platform to seamlessly develop, test, and run Granite family large language models LLMs for enterprise applications. This update provides the latest Red Hat Enterprise...

Important: Red Hat Security Advisory: Red Hat Enterprise Linux AI 3.3.5

Updated Red Hat Enterprise Linux AI 3.3.5 container images are now available. Red Hat® Enterprise Linux® AI is a foundation model platform to seamlessly develop, test, and run Granite family large language models LLMs for enterprise applications. This update provides the latest Red Hat Enterprise...

Important: Red Hat Security Advisory: Red Hat Enterprise Linux AI 3.3.5

Updated Red Hat Enterprise Linux AI 3.3.5 container images are now available. Red Hat® Enterprise Linux® AI is a foundation model platform to seamlessly develop, test, and run Granite family large language models LLMs for enterprise applications. This update provides the latest Red Hat Enterprise...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: kubernetes1.35: kubernetes1.35-1.35.6-2.1.hum1 aarch64, x8664 kubernetes1.35-client-1.35.6-2.1.hum1 aarch64, x8664 kubernetes1.35-kubeadm-1.35.6-2.1.hum1 aarch64, x8664...

Important: Red Hat Security Advisory: Red Hat Enterprise Linux AI 3.3.5

Updated Red Hat Enterprise Linux AI 3.3.5 container images are now available. Red Hat® Enterprise Linux® AI is a foundation model platform to seamlessly develop, test, and run Granite family large language models LLMs for enterprise applications. This update provides the latest Red Hat Enterprise...

Important: Red Hat Security Advisory: RHEL AI 3.5 RPM runtime CVE fix - ffmpeg

AIPCC Security Alerts identified CVEs in the 3.5 release of base-images. The CVEs are listed with a severity level of "Important" or higher. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application platform...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: capstone: capstone-5.0.8-0.1.hum1 aarch64, x8664 capstone-devel-5.0.8-0.1.hum1 aarch64, x8664 capstone-java-5.0.8-0.1.hum1 noarch capstone-static-5.0.8-0.1.hum1 aarch64, x8664...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the decodegridtile process. An attacker can cause a heap out-of-bounds read by supplying a crafted image file that triggers an irot-induced tile-coordinate underflow. Remediation Upgrade libheif to version 1.23.1 o...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentofu1.10: opentofu1.10-1.10.10-0.3.hum1 aarch64, x8664 opentofu1.10-1.10.10-0.3.hum1.src src Security Fixes: opentofu1.10: CVE-2026-56852...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: jaeger: jaeger-2.20.0-0.2.hum1 aarch64, x8664 jaeger-2.20.0-0.2.hum1.src src Security Fixes: jaeger: CVE-2026-56852...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentelemetry-collector: opentelemetry-collector-0.157.0-0.1.hum1 aarch64, x8664 opentelemetry-collector-0.157.0-0.1.hum1.src src Security Fixes: opentelemetry-collector: CVE-2026-56852...