TencentOS Server 3: gimp:2.8 (TSSA-2026:0972)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0972 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

openSUSE 16: emacs / emacs-el / emacs-eln / emacs-games / emacs-info / emacs-nox / etc (openSUSE-SU-2026:21711-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21711-1 advisory. Security issues fixed: - Arbitrary code execution when opening a specially crafted file bsc1275941. - CVE-2026-77219: integer overflow in the...

RockyLinux 8 : gegl (RLSA-2026:62425)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:62425 advisory. gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing CVE-2026-18300 Tenable has extracted the preceding description block directly fr...

ALSA-2026:63128 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Bluetooth: hcildisc: Clear HCIUARTPROTOINIT on error CVE-2026-53073 kernel: exfat: fix potential use-after-free in exfatfinddirentry CVE-2026-63808 kernel: KEYS: fix overflow in...

CVE-2026-84965: Integer Overflow or Wraparound

An integer wraparound in an allocation size calculation in the BSON library's JSON parsing code can cause a buffer to be released while a following copy operation still writes through the stale pointer. On builds where sizes are 32 bits, an unauthenticated party able to supply a sufficiently larg...

...[ More ]

EVerest version 2025.9.0 suffers from an integer overflow in SdpPacket::parseheader that allows an attacker to trigger either an infinite loop TCP or stack buffer overflow TLS by sending a malformed SDP packet with a specially crafted length field. The vulnerability exists because the length fiel...

AlmaLinux 8 : gimp:2.8 (ALSA-2026:62507)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:62507 advisory. gimp: gimp: Stack buffer overflow in pnmscannergettoken CVE-2026-58380 gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on...

MiracleLinux 8 : gegl04-0.4.4-7.el8_10.1 (AXSA:2026-1747:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1747:02 advisory. gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing CVE-2026-18300 Tenable has extracted the preceding description block directl...

MiracleLinux 8 : gegl-0.2.0-40.el8_10.1 (AXSA:2026-1746:02)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1746:02 advisory. gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing CVE-2026-18300 Tenable has extracted the preceding description block directl...

AlmaLinux 9 : gimp (ALSA-2026:61587)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:61587 advisory. gimp: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow CVE-2026-59090 gimp: GIMP: Arbitrary code execution via crafted TIF file...

PT-2026-85078

Signum Node is a HDD-mined cryptocurrency using an energy efficient and fair Proof-of-Commitment PoC+ consensus algorithm. Prior to version 3.9.9, an integer overflow in BlockServiceImpl.applyBlock allowed a miner to receive an arbitrarily inflated block reward by crafting a block with a negative...

RHEL 8 : gegl (RHSA-2026:62425)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:62425 advisory. GEGL Generic Graphics Library is a graph-based image processing framework. Security Fixes: gimp: gegl: GIMP: Remote code execution via integer...

RockyLinux 8 : gegl04 (RLSA-2026:62420)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:62420 advisory. gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing CVE-2026-18300 Tenable has extracted the preceding description block directly fr...

Oracle Linux 8 : ELSA-2026-62144-0: / wget (ELSA-2026-621440)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-621440 advisory. - Fix CVE-2026-58469: buffer underflow in cleanmetalinkstring - Fix CVE-2026-58471: buffer overflow in convertfname - Fix CVE-2026-58472: integer and...

GO-2026-6330 klever-go: SFT add-quantity `int64` overflow bypasses a finite per-nonce MaxSupply in github.com/klever-io/klever-go

klever-go: SFT add-quantity int64 overflow bypasses a finite per-nonce MaxSupply in github.com/klever-io/klever-go...

GO-2026-6310 Klever: Integer overflow in split-royalty validation enables unbounded minting of KLV (native token) in github.com/klever-io/klever-go

Klever: Integer overflow in split-royalty validation enables unbounded minting of KLV native token in github.com/klever-io/klever-go...

CSRF (Cross-Site Request Forgery) nanoid Dependency in Jira Software Data Center

This High severity CSRF Cross-Site Request Forgery vulnerability was introduced in versions 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Software Data Center. This CSRF Cross-Site Request Forgery vulnerability, with a CVSS Score of 7.4 and a...

RLSA-2026:62507 Important: gimp:2.8 security update

The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fixes: gimp: gimp: Sta...

gimp:2.8 security update

An update is available for module.gimp, pygtk2, module.pygobject2, module.python2-pycairo, gimp, pygobject2, module.pygtk2, python2-pycairo. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

A flaw was found in OpenSSL. A signed integer overflow vulnerability exists when sizing the destination buffer for Unicode output. This can lead to a heap buffer overflow, which may result in a crash or potentially allow an attacker to execute arbitrary code. Exploitation requires an application ...