libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT8BITABGR output format and a specific stride value, leading to a heap-base...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.6 bug fix and security update

Red Hat OpenShift Container Platform release 4.22.6 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.30 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.30 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

CVE-2026-63815

A flaw was found in the Linux kernel's f2fs Flash-Friendly File System component. When processing a specially crafted f2fs filesystem image, an attacker can trigger an out-of-bounds read. This occurs because the system incorrectly validates the size of inline extended attributes, leading to...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: rabbitmq-server4.2: rabbitmq-server4.2-4.2.9-0.1.hum1 aarch64, x8664 rabbitmq-server4.2-4.2.9-0.1.hum1.src src...

PT-2026-62010

Malcolm is a network traffic analysis tool suite. Prior to version 26.07.0, safe-extract.py extracts uploaded archives with no limit on entry count, directory depth, total entries, or output size. A small malicious archive containing a large number of directory or file entries causes the filebeat...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: glib2: glib2-2.89.2-2.hum1 aarch64, x8664 glib2-devel-2.89.2-2.hum1 aarch64, x8664 glib2-doc-2.89.2-2.hum1 aarch64, x8664 glib2-static-2.89.2-2.hum1 aarch64, x8664 glib2-tests-2.89.2-2.hum1...

EUVD-2026-43735

Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path McIdas AREA files...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: helm3: helm3-3.21.3-0.1.2.hum1 aarch64, x8664 helm3-3.21.3-0.1.2.hum1.src src...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: helm4: helm4-4.2.3-0.1.2.hum1 aarch64, x8664 helm4-4.2.3-0.1.2.hum1.src src Security Fixes: helm4: CVE-2026-63308...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: dotnet8.0: aspnetcore-runtime-8.0-8.0.29-2.1.hum1 aarch64, x8664 aspnetcore-runtime-dbg-8.0-8.0.29-2.1.hum1 aarch64, x8664 aspnetcore-targeting-pack-8.0-8.0.29-2.1.hum1 aarch64, x8664...

CVE-2026-33328

CVE-2026-33328 affects libvips, a fast image processing library. On 32-bit systems, versions up to and including 8.18.0 allow the GIF decode path (gifload) to miscompute image dimensions, potentially triggering an integer overflow. The issue is resolved in version 8.18.1. Impact details in the so...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grype: grype-0.116.0-0.1.hum1 aarch64, x8664 grype-0.116.0-0.1.hum1.src src...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libyuv: libyuv-0-0.63.20260714gitafff0cf.1.hum1 aarch64, x8664 libyuv-devel-0-0.63.20260714gitafff0cf.1.hum1 aarch64, x8664 libyuv-0-0.63.20260714gitafff0cf.1.hum1.src src Security Fixes: libyuv:...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: busybox: busybox-1.37.0-8.2.hum1 aarch64, x8664 busybox-petitboot-1.37.0-8.2.hum1 aarch64, x8664 busybox-shared-1.37.0-8.2.hum1 aarch64, x8664 busybox-1.37.0-8.2.hum1.src src Security Fixes:...

CVE-2026-59238

CVE-2026-59238 describes a Stored XSS in Pentestify prior to 1.1.0. The vulnerability is in the client-side report rendering functions (renderPreview, renderEditor, renderAuditData in js/app.js), where payloads placed in a finding’s images array or a report’s client_logo array are interpolated in...

CVE-2026-59238 Stored XSS in Pentestify via unsanitized finding images and report client logo

Stored Cross-site Scripting CWE-79 in the client-side report rendering functions renderPreview, renderEditor, renderAuditData in js/app.js in maalfer Pentestify before 1.1.0 allows a remote, authenticated attacker to execute arbitrary JavaScript in the browser of any user who views an affected...

CVE-2026-59238 Stored XSS in Pentestify via unsanitized finding images and report client logo

Stored Cross-site Scripting CWE-79 in the client-side report rendering functions renderPreview, renderEditor, renderAuditData in js/app.js in maalfer Pentestify before 1.1.0 allows a remote, authenticated attacker to execute arbitrary JavaScript in the browser of any user who views an affected...

CVE-2026-59238

Stored Cross-site Scripting CWE-79 in the client-side report rendering functions renderPreview, renderEditor, renderAuditData in js/app.js in maalfer Pentestify before 1.1.0 allows a remote, authenticated attacker to execute arbitrary JavaScript in the browser of any user who views an affected...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: jaeger: jaeger-2.19.0-1.2.hum1 aarch64, x8664 jaeger-2.19.0-1.2.hum1.src src Security Fixes: jaeger: CVE-2026-49852...