RockyLinux 8 : mod_auth_openidc:2.3 (RLSA-2026:77369)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:77369 advisory. modauthopenidc: modauthopenidc: Denial of Service via malformed state cookie parsing CVE-2026-54789 cjose: cjose: Heap buffer overflow in AES Key Wrap...

[slackware-security] xorg-server

New xorg-server packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/xorg-server-1.20.14-i586-22slack15.0.txz: Rebuilt. This update fixes security issues: XKB SetGeometry TextDoodad Double Free...

CVE-2026-107161 Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients

A heap-based buffer overflow flaw was found in Cyrus SASL. The addtochallenge function in the DIGEST-MD5 plugin computes the size of the buffer needed for a challenge/response field before DIGEST-MD5 quoting is applied, but does not recompute that size when quoting escaping special characters mak...

CVE-2026-107161 Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients

A heap-based buffer overflow flaw was found in Cyrus SASL. The addtochallenge function in the DIGEST-MD5 plugin computes the size of the buffer needed for a challenge/response field before DIGEST-MD5 quoting is applied, but does not recompute that size when quoting escaping special characters mak...

CVE-2026-107161

A heap-based buffer overflow exists in Cyrus SASL within the add_to_challenge() function of the DIGEST-MD5 plugin. The vulnerability occurs because the application calculates the required buffer size before quoting/escaping special characters but fails to recompute it when the resulting string le...

CVE-2026-42616

A flaw was found in NTFS-3G. An attacker can trigger a heap buffer overflow in the ntfscat utility by providing a specially crafted NTFS filesystem image. When the utility attempts to read a file from the malicious image, heap memory is corrupted, which can lead to a Denial of Service DoS crash o...

CVE-2026-106067 Gimp: gimp: heap buffer overflow in hot color filter on oversized image

A heap-based buffer overflow was found in GIMP’s Hot color filter plug-in. For very large images, a pixel buffer is allocated using overflowing 32-bit width height and related arithmetic while the filter’s pixel access path uses the true image size, after integer overflow in the allocation size...

CVE-2026-106067

A heap-based buffer overflow exists in the GIMP Hot color filter plug-in. The vulnerability occurs when processing oversized images due to an integer overflow during the calculation of the pixel buffer allocation size (using 32-bit width * height arithmetic). While the buffer is allocated based o...

CVE-2026-106067 Gimp: gimp: heap buffer overflow in hot color filter on oversized image

A heap-based buffer overflow was found in GIMP’s Hot color filter plug-in. For very large images, a pixel buffer is allocated using overflowing 32-bit width height and related arithmetic while the filter’s pixel access path uses the true image size, after integer overflow in the allocation size...

CVE-2026-106066

A heap-based buffer overflow exists in GIMP’s raw data export plug-in . The vulnerability is caused by an integer overflow during the calculation of memory requirements (width * height * bytes-per-pixel) for very large images. This leads g_malloc() to allocate insufficient memory, which is then o...

CVE-2026-106066 Gimp: gimp: heap buffer overflow in raw data export on oversized image dimensions

A heap-based buffer overflow was found in GIMP’s raw data export plug-in. When exporting very large images, gmalloc sizing based on overflowing width height bytes-per-pixel can allocate far less memory than GEGL reads or writes during export, following integer overflow...

CVE-2026-106066 Gimp: gimp: heap buffer overflow in raw data export on oversized image dimensions

A heap-based buffer overflow was found in GIMP’s raw data export plug-in. When exporting very large images, gmalloc sizing based on overflowing width height bytes-per-pixel can allocate far less memory than GEGL reads or writes during export, following integer overflow...

CVE-2026-106065 Gimp: gimp: heap buffer overflow in pcx export on oversized image dimensions

A heap-based buffer overflow was found in GIMP’s PCX export plug-in. For images with extremely large width and height, buffer allocation uses overflowing 32-bit width height arithmetic while subsequent GEGL operations use the full extent, after integer overflow in size calculation...

CVE-2026-106065 Gimp: gimp: heap buffer overflow in pcx export on oversized image dimensions

A heap-based buffer overflow was found in GIMP’s PCX export plug-in. For images with extremely large width and height, buffer allocation uses overflowing 32-bit width height arithmetic while subsequent GEGL operations use the full extent, after integer overflow in size calculation...

CVE-2026-106065

A heap-based buffer overflow exists in GIMP's PCX export plug-in due to an integer overflow during size calculation. When processing images with extremely large width and height, the software uses overflowing 32-bit width * height arithmetic for buffer allocation, while subsequent GEGL operations...

DEBIAN-CVE-2026-106571

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 6.9.13-56 and 7.1.2-31, a crafted local call to the GetVirtualPixels API can trigger an integer calculation error and write beyond a heap buffer, crashing the server process. This issue is fixe...

CVE-2026-106571

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 6.9.13-56 and 7.1.2-31, a crafted local call to the GetVirtualPixels API can trigger an integer calculation error and write beyond a heap buffer, crashing the server process. This issue is fixe...

DEBIAN-CVE-2026-106564

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, a crafted EXR image can cause the EXR decoder to write beyond a heap buffer, causing the process to crash. This issue is fixed in version 7.1.2-32...

CVE-2026-106564

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, a crafted EXR image can cause the EXR decoder to write beyond a heap buffer, causing the process to crash. This issue is fixed in version 7.1.2-32...

CVE-2026-106571

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 6.9.13-56 and 7.1.2-31, a crafted local call to the GetVirtualPixels API can trigger an integer calculation error and write beyond a heap buffer, crashing the server process. This issue is fixe...