PT-2026-95453

Name of the Vulnerable Software and Affected Versions OpenImageIO versions prior to 3.0.20.0 OpenImageIO versions prior to 3.1.15.0 OpenImageIO versions prior to 3.2.0.3-beta1 Description An issue exists when processing uncompressed 16-bit IFF images containing a z-buffer. The IffInput::readimg...

EulerOS Virtualization 2.12.0 : vim (EulerOS-SA-2026-3679)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim...

EulerOS Virtualization 2.11.1 : openjpeg2 (EulerOS-SA-2026-3446)

According to the versions of the openjpeg2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified...

EulerOS 2.0 SP10 : wget (EulerOS-SA-2026-3774)

According to the versions of the wget packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the htmlquotestring function in src/convert.c tha...

EulerOS Virtualization 2.11.1 : perl (EulerOS-SA-2026-3450)

According to the versions of the perl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including...

EulerOS Virtualization 2.12.0 : openssl (EulerOS-SA-2026-3656)

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1mbstringncopy can lead to a...

EulerOS 2.0 SP10 : openssl (EulerOS-SA-2026-3756)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a hea...

EulerOS Virtualization 2.12.0 : wget (EulerOS-SA-2026-3680)

According to the versions of the wget package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convertfname function within...

EulerOS 2.0 SP10 : proftpd (EulerOS-SA-2026-3713)

According to the versions of the proftpd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : ProFTPD modsftp contains a heap-based buffer overflow reachable by an authenticated SFTP user. The fxppacketread function accepts the...

SUSE SLES12 Security Update : tiff (SUSE-SU-2026:4252-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4252-1 advisory. This update for tiff fixes the following issue: - CVE-2026-18495: libtiff: heap-buffer overflow via numeric truncation in the JPEG raw...

EulerOS Virtualization 2.11.0 : perl (EulerOS-SA-2026-3537)

According to the versions of the perl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including...

EulerOS Virtualization 2.12.1 : libtiff (EulerOS-SA-2026-3595)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compresse...

EulerOS 2.0 SP10 : libXfont2 (EulerOS-SA-2026-3698)

According to the versions of the libXfont2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties before...

MiracleLinux 9 : corosync-3.1.10-1.el9_8.2 (AXSA:2026-1879:05)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1879:05 advisory. corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly CVE-2026-81665 Tenable has extracted the...

EulerOS Virtualization 2.11.1 : util-linux (EulerOS-SA-2026-3479)

According to the versions of the util-linux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifical...

EulerOS Virtualization 2.11.0 : openjpeg2 (EulerOS-SA-2026-3533)

According to the versions of the openjpeg2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified...

openSUSE 16 Security Update : mkvtoolnix (openSUSE-SU-2026:21867-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21867-1 advisory. Changes in mkvtoolnix: - CVE-2026-90783: heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit...

EulerOS 2.0 SP10 : libXfont2 (EulerOS-SA-2026-3746)

According to the versions of the libXfont2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties before...

EulerOS Virtualization 2.11.0 : vim (EulerOS-SA-2026-3568)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : The UNIX editor Vim prior to version 9.1.0678 has a use-after-free error in argument list handling. When adding a new file to the...

EulerOS 2.0 SP10 : shim (EulerOS-SA-2026-3723)

According to the versions of the shim package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a heap...