TI-2026-29006 CVE-2026-40192 · GHSA-whj4-6x5x-4v2j
Pillow is vulnerable to a FITS GZIP decompression bomb
Priority MEDIUM 45
Pillow is a Python imaging library.
RHSA-2026:34366
Satellite 6.17.9 Async Update
Released 2026-07-01 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Satellite 6.17 for RHEL 9 dynflow-utils-1.6.3-1.1.el9sat, foreman-3.14.0.17-1.el9sat, foreman-cli-3.14.0.17-1.el9sat +16
Fixes 6 records
TI-2026-04483 CVE-2026-5136 · GHSA-fpxf-rppp-4373
Foreman: foreman: privilege escalation to administrator-level access via usergroup role assignment manipulation
Priority MEDIUM 41
A flaw was found in Foreman.
TI-2026-24811 CVE-2026-32282 · GHSA-xj38-jxc5-rppx
TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix
Priority LOW 30
On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root.
TI-2026-04489 CVE-2026-5142 · GHSA-h2gj-g5gx-f7qq
Foreman: foreman: cross-tenant private ssh key disclosure via taxonomy scoping bypass
Priority LOW 29
A flaw was found in foreman.
TI-2026-04482 CVE-2026-5135 · GHSA-vpj3-792h-v855
Foreman: foreman: unauthorized modification of host configurations via broken access control
Priority LOW 29
A flaw was found in Foreman.
TI-2026-04485 CVE-2026-5138 · GHSA-47r2-h2mh-qqjp
Foreman: foreman: information disclosure via improper validation of nested request parameters
Priority LOW 20
A flaw was found in Foreman.