Fedora 43 : emacs (2026-8894da1406)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8894da1406 advisory. Fix CVE-2026-77219: Integer overflow in PBM/PPM/PGM image loader. Tenable has extracted the preceding description block directly from the Fedora security...

CLSA-2026-1773655369 gimp: Fix of 4 CVEs

CVE-2026-2044: fix uninitialized memory read in PGM file parser - CVE-2026-2045: fix heap buffer overflow in XWD file loader - CVE-2026-2048: fix out-of-bounds write in XWD file loader - CVE-2026-0797: fix missing fread return value checks in ICO file loader...

The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the get_word_rgb_row function in rdppm.c.

...

serenity:FuzzPGMLoader: Bad-cast to AK::Array<AK::TypeErasedParameter, 0>Gfx::read_image_data in bool Gfx::decode<Gfx::PGMLoadingContext>

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=5499797183266816 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzPGMLoader Job Type: libfuzzerubsanserenity Platform Id: linux Crash Type: Bad-cast Crash Address: 0x7ffdf1930568 Cra...