pentaho-reporting-flow-engine vulnerabilities (AlmaLinux)

4 vulnerabilities.

• pentaho-reporting-flow-engine AlmaLinux RCE via calcext:data-mappings, sql provider and jdbc connector CVE-2026-63277 Public exploitFix available 8.5 HighOctober 5, 2026
• pentaho-reporting-flow-engine AlmaLinux Stack buffer overflow in CFF to Type 1 font conversion CVE-2026-63276 Fix available 5.4 MediumSeptember 22, 2026
• pentaho-reporting-flow-engine AlmaLinux Stack buffer overflow in CFF font hint handling CVE-2026-63275 Fix available 5.4 MediumSeptember 22, 2026
• pentaho-reporting-flow-engine AlmaLinux Heap buffer overflow in PDF import stream handling CVE-2026-63274 Fix available 5.4 MediumSeptember 22, 2026