This security advisory from Red Hat Product Security announces an update to Red Hat Hardened Images RPMs, including several tomcat10 packages updated to version 10.1.57-1.hum1. The update addresses two vulnerabilities identified as CVE-2026-59083 and CVE-2026-59084, which correspond to weaknesses CWE-807 (Improper Control of Integrity Check Value) and CWE-1188 (Improper Access of Indexable Resource). The advisory does not provide detailed technical descriptions or CVSS scores but categorizes the severity as low. There are no known exploits in the wild. The advisory references Red Hat's official errata and update channels for applying the fixes.

The vulnerabilities addressed are of low severity and relate to integrity check and access control issues in tomcat10 RPM packages within Red Hat Hardened Images. There is no evidence of active exploitation. The impact is limited to potential security weaknesses in these components, which could affect the integrity or access control of the affected software if left unpatched.

A fix is available through the update to tomcat10 packages version 10.1.57-1.hum1 included in the Red Hat Hardened Images RPMs. Users should apply this update following Red Hat's official guidance at https://images.redhat.com/. No additional mitigation steps are specified or required beyond applying the update.