TI-2026-21005 CVE-2026-25990 · GHSA-cfh3-3jmp-rvhc
Pillow has an out-of-bounds write when loading PSD images
Priority MEDIUM 45
Pillow is a Python imaging library.
RHSA-2026:28385
Satellite 6.18.6 Async Update
Released 2026-06-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Satellite 6.18 for RHEL 9 candlepin-4.6.6-1.el9sat, candlepin-selinux-4.6.6-1.el9sat, dynflow-utils-2.0.1-1.el9sat +1
Fixes 3 records
TI-2026-22181 CVE-2026-27830 · GHSA-5476-xc4j-rqcv
c3p0 vulnerable to Remote Code Execution via unsafe deserialization of userOverridesAsString property
Priority MEDIUM 41
c3p0, a JDBC Connection pooling library, is vulnerable to attack via maliciously crafted Java-serialized objects and `javax.naming.Reference` instances.
TI-2026-24811 CVE-2026-32282 · GHSA-xj38-jxc5-rppx
TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix
Priority LOW 30
On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root.