program-synthesis (0.1.2), qfragment (0.0.16) potentially affected by CVE-2022-35986 via tensorflow (1.5.1)

tensorflow PYPI version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - program-synthesis 0.1.2 - qfragment 0.0.16 Source cves: CVE-2022-35986 Source advisory: OSV:PYSEC-2026-938...

program-synthesis (0.1.2), qfragment (0.0.16) potentially affected by CVE-2022-35998 via tensorflow (1.5.1)

tensorflow PYPI version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - program-synthesis 0.1.2 - qfragment 0.0.16 Source cves: CVE-2022-35998 Source advisory: OSV:PYSEC-2026-937...

CVE-2026-58383

A flaw was found in GIMP's Jeff's Image Format JIF parser. A heap-based out-of-bounds write occurs in the ReadJeffsImage function when a crafted JIF file sets bits-per-pixel to 0, causing the unpack loop to never advance and to write indefinitely past the destination buffer. This could lead to...

CVE-2026-58384

A flaw was found in GIMP's PSD parser. An integer overflow in readRLEchannel can cause an undersized heap allocation for the RLE row-length table, after which subsequent per-row writes corrupt heap memory. This could lead to memory corruption, potentially resulting in denial of service or arbitra...

Packed Bitmap Validation Utility for Detecting Pitch Mismatches and Memory-Safety Risks

This C program implements a lightweight validation utility for identifying structural inconsistencies in packed bitmap formats by analyzing relationships between image width, pitch, and bits-per-pixel representations...

printenv: environment variables with invalid UTF-8 are silently skipped (evades inspection)

The printenv utility in uutils coreutils fails to display environment variables containing invalid UTF-8 byte sequences. While POSIX permits arbitrary bytes in environment strings, the uutils implementation silently skips these entries rather than printing the raw bytes. This vulnerability allows...

GHSA-JCJR-RH8Q-7XQF ln: rejects non-UTF-8 source filenames in target-directory mode

In target-directory forms ln SOURCE... DIRECTORY, ln rejects source paths with non-UTF-8 filename bytes, while GNU accepts them. Breaks GNU compatibility for byte-oriented filenames on Unix filesystems. PoC: name=$printf 'bad\377'; mkdir dst; : "$name"; ln "$name" dst GNU: exit 0, creates...

CVE-2026-14809

Prog Management System developed by PROG MIS has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...

SUSE-SU-2026:22664-1 Security update for jq

This update for jq fixes the following issues: - CVE-2026-32316: integer overflow within the jvpstringappend and jvpstringcopyreplacebad functions can lead to heap buffer overflow when evaluating untrusted jq queries bsc1262044. - CVE-2026-33947: unbounded recursion in functions jvsetpath,...

SUSE CVE-2026-53083

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix RCU stall in bpffdarraymapclear Add a missing condresched in bpffdarraymapclear loop. For PROGARRAY maps with many entries this loop calls progarraymappokerun per entry which can be expensive, and without yielding this c...

NetComm NF20MESH Unauthorized Access

The vulnerability of the web interface for managing micro-program software on NetComm NF20MESH routers is related to the use of a rigidly encrypted cryptographic key. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

EUVD-2026-36320

OpenClaw: Hook-triggered CLI runs could receive owner MCP tool authority...

TencentOS Server 2: gimp (TSSA-2026:0575)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0575 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound in the XCF decoder when processing crafted image files. An attacker can cause a crash or read sensitive memory contents by supplying a specially crafted image file. Remediation A fix was pushed into the...

CVE-2026-53352

In the Linux kernel, the following vulnerability has been resolved: signal: clear JOBCTLPENDINGMASK for caller in zapotherthreads When a multi-threaded process receives a stop signal e.g., SIGSTOP, dosignalstop sets JOBCTLSTOPPENDING and JOBCTLSTOPCONSUME on all threads and sets...

AppViewX Launches Global Partner Program Amid Rising Demand for Machine and Agent Identity Security

New York, United States, 30th June 2026, CyberNewswire...

Linux Kernel BPF Buffer Overflow DoS

The vulnerability of the bpfprogattach function in the kernel/bpf/syscall.c module, which is part of the BPF interpreter support for Linux’s operating system, is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to trigger a servic...

ROS-20260630-73-0017

The vulnerability of the runbpfprog function in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

program-synthesis (0.1.2), qfragment (0.0.16) potentially affected by CVE-2023-25668 via tensorflow (1.5.1)

tensorflow PYPI version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - program-synthesis 0.1.2 - qfragment 0.0.16 Source cves: CVE-2023-25668 Source advisory: OSV:PYSEC-2026-548...

[SECURITY] Fedora 44 Update: krita-6.0.2.1-1.fc44

Krita is a sketching and painting program. It was created with the following types of art in mind: - concept art - texture or matte painting - illustrations and comics...