Lucene search
K

243 matches found

AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.5 views

Astra Linux – Vulnerability in Gegl

The loadcache function in GEGL before version 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This issue arises due to the use of the system library function for executing the ImageMagick convert fallback in magick-load. NOTE: GEGL versions...

7.8CVSS7.5AI score0.01439EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/04/22 12:0 a.m.3 views

SUSE SLED15 / SLES15 Security Update : gegl (SUSE-SU-2026:1496-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:1496-1 advisory. - CVE-2026-2049: improper validation of the length of user-supplied data when parsing HDR files can lead to a heap buff...

7.8CVSS6.1AI score0.00548EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/04/21 12:0 a.m.4 views

SUSE SLED15 / SLES15 Security Update : gegl (SUSE-SU-2026:1481-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:1481-1 advisory. This update for gegl fixes the following issue: - CVE-2026-2049: improper validation of the length of user-supplied dat...

7.8CVSS6.1AI score0.00548EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/04/21 12:0 a.m.5 views

SUSE SLES12 Security Update : gegl (SUSE-SU-2026:1479-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:1479-1 advisory. This update for gegl fixes the following issue: - CVE-2026-2049: improper validation of the length of user-supplied data when parsing HDR files can lea...

7.8CVSS6.1AI score0.00548EPSS
Exploits0References4
SUSE Linux
SUSE Linux
added 2026/04/20 4:14 p.m.13 views

Security update for gegl

This update for gegl fixes the following issues: CVE-2026-2049: improper validation of the length of user-supplied data when parsing HDR files can lead to a heap buffer overflow bsc1259749. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

8.4CVSS7.3AI score0.00548EPSS
Exploits0References4
OSV
OSV
added 2026/04/20 4:14 p.m.5 views

SUSE-SU-2026:1496-1 Security update for gegl

This update for gegl fixes the following issues: - CVE-2026-2049: improper validation of the length of user-supplied data when parsing HDR files can lead to a heap buffer overflow bsc1259749...

7.8CVSS6AI score0.00548EPSS
Exploits0References3
SUSE Linux
SUSE Linux
added 2026/04/20 10:9 a.m.5 views

Security update for gegl

This update for gegl fixes the following issue: CVE-2026-2049: improper validation of the length of user-supplied data when parsing HDR files can lead to a heap buffer overflow bsc1259749. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

8.4CVSS6AI score0.00548EPSS
Exploits0References4
OSV
OSV
added 2026/04/20 10:9 a.m.2 views

SUSE-SU-2026:1481-1 Security update for gegl

This update for gegl fixes the following issue: - CVE-2026-2049: improper validation of the length of user-supplied data when parsing HDR files can lead to a heap buffer overflow bsc1259749...

7.8CVSS7.3AI score0.00548EPSS
Exploits0References3
SUSE Linux
SUSE Linux
added 2026/04/20 10:9 a.m.5 views

Security update for gegl

This update for gegl fixes the following issue: CVE-2026-2049: improper validation of the length of user-supplied data when parsing HDR files can lead to a heap buffer overflow bsc1259749. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

8.4CVSS6AI score0.00548EPSS
Exploits0References4
OSV
OSV
added 2026/04/20 10:9 a.m.4 views

SUSE-SU-2026:1479-1 Security update for gegl

This update for gegl fixes the following issue: - CVE-2026-2049: improper validation of the length of user-supplied data when parsing HDR files can lead to a heap buffer overflow bsc1259749...

7.8CVSS6AI score0.00548EPSS
Exploits0References3
Amazon
Amazon
added 2026/03/06 12:0 a.m.5 views

Important: gegl

Issue Overview: The rgbereadnewrle function in gegl/libs/rgbe/rgbe.c has a heap buffer overflow vulnerability during HDR image parsing that may allow remote code execution. CVE-2026-2049 When parsing an HDR image file, the function rgbereadnewrle gegl/libs/rgbe/rgbe.c contains HEAP Based Buffer...

6.4AI score0.00548EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2026/03/06 12:0 a.m.8 views

Amazon Linux 2 : gegl, --advisory ALAS2-2026-3183 (ALAS-2026-3183)

The version of gegl installed on the remote host is prior to 0.2.0-19. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3183 advisory. The rgbereadnewrle function in gegl/libs/rgbe/rgbe.c has a heap buffer overflow vulnerability during HDR image parsing that...

7.8CVSS7.6AI score0.00548EPSS
Exploits0References6
OpenVAS
OpenVAS
added 2026/02/24 12:0 a.m.8 views

Mageia: Security Advisory (MGASA-2026-0047)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS5.4AI score0.00548EPSS
Exploits0References4
Mageia
Mageia
added 2026/02/23 4:45 p.m.12 views

Updated gegl packages fix security vulnerabilities

ZDI-CAN-28618: New Vulnerability Report at rgbe.c. CVE-2026-2049 ZDI-CAN-28266: New Vulnerability Report at rgbe.c. CVE-2026-2050...

7.8CVSS5.4AI score0.00548EPSS
Exploits0References2
OSV
OSV
added 2026/02/23 4:45 p.m.9 views

MGASA-2026-0047 Updated gegl packages fix security vulnerabilities

ZDI-CAN-28618: New Vulnerability Report at rgbe.c. CVE-2026-2049 ZDI-CAN-28266: New Vulnerability Report at rgbe.c. CVE-2026-2050...

7.8CVSS5.4AI score0.00548EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2026/02/23 12:0 a.m.6 views

Debian: Security Advisory (DLA-4487-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS5.4AI score0.00548EPSS
Exploits0References2
Debian
Debian
added 2026/02/21 10:22 a.m.5 views

[SECURITY] [DLA 4487-1] gegl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4487-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz February 21, 2026 https://wiki.debian.org/LTS -...

7.8CVSS6.6AI score0.00548EPSS
Exploits0
OSV
OSV
added 2026/02/21 12:0 a.m.4 views

DLA-4487-1 gegl - security update

Bulletin has no description...

7.8CVSS5.1AI score0.00548EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2026/02/21 12:0 a.m.6 views

Debian dla-4487 : gegl - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4487 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4487-1 [email protected]...

7.8CVSS7.6AI score0.00548EPSS
Exploits0References6
OpenVAS
OpenVAS
added 2026/02/20 12:0 a.m.5 views

Debian: Security Advisory (DSA-6142-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS5.5AI score0.00548EPSS
Exploits0References2
Rows per page
Query Builder