CLSA-2026-1791479721 gimp: Fix of 10 CVEs

CVE-2026-90948: compute the ICO PNG frame size and the image buffer size with gsizecheckedmul in icoreadpng and icoloadimage - CVE-2026-90947: clamp the preset "Number of lights" to NUMLIGHTS in the Lighting Effects loadpresetresponse - CVE-2026-92248: bound the PSD JPEG thumbnail dimensions and...

CLSA-2026-1792278660 TuxCare security update for @babel/preset-typescript (1 CVE)

TuxCare rebuilt @babel/preset-typescript to address 1 CVE. Fixed in 7.12.13-tuxcare.1...

CLSA-2026-1792278659 TuxCare security update for @babel/preset-typescript (1 CVE)

TuxCare rebuilt @babel/preset-typescript to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

CLSA-2026-1792278641 TuxCare security update for @babel/preset-typescript (2 CVEs)

TuxCare rebuilt @babel/preset-typescript to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

CLSA-2026-1792278640 TuxCare security update for @babel/preset-typescript (1 CVE)

TuxCare rebuilt @babel/preset-typescript to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

CLSA-2026-1792278638 TuxCare security update for @babel/preset-typescript (1 CVE)

TuxCare rebuilt @babel/preset-typescript to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

CLSA-2026-1792162185 TuxCare security update for @babel/preset-react (1 CVE)

TuxCare rebuilt @babel/preset-react to address 1 CVE. Fixed in 7.16.7-tuxcare.2...

CLSA-2026-1792162184 TuxCare security update for @babel/preset-react (1 CVE)

TuxCare rebuilt @babel/preset-react to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

CLSA-2026-1792162182 TuxCare security update for @babel/preset-react (1 CVE)

TuxCare rebuilt @babel/preset-react to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

CLSA-2026-1792160973 TuxCare security update for @babel/preset-react (1 CVE)

TuxCare rebuilt @babel/preset-react to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

SUSE SLED15: gimp / gimp-devel / gimp-lang / gimp-plugin-aa / libgimp-2_0-0 / etc (SUSE-SU-2026:4653-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4653-1 advisory. This update for gimp fixes the following issue: - CVE-2026-97185: out-of-bounds write in GIMPressionist plugin via...

CVE-2026-110868 Renovate before 44.79.0 SSRF via HTTP Preset URLs and customDatasources

Renovate before 44.79.0 contains a server-side request forgery vulnerability that allows users to make the shared HTTP client request arbitrary internal URLs via extends presets or customDatasources. Attackers can point a preset at an instance metadata service endpoint to obtain AWS credentials o...

CVE-2026-110868 Renovate before 44.79.0 SSRF via HTTP Preset URLs and customDatasources

Renovate before 44.79.0 contains a server-side request forgery vulnerability that allows users to make the shared HTTP client request arbitrary internal URLs via extends presets or customDatasources. Attackers can point a preset at an instance metadata service endpoint to obtain AWS credentials o...

CVE-2026-110868

Renovate versions before 44.79.0 are vulnerable to a Server-Side Request Forgery (SSRF) vulnerability. The issue allows users to force the shared HTTP client to request arbitrary internal URLs through extends presets or customDatasources . An attacker can exploit this by pointing a preset at an i...

CVE-2026-110867 Renovate before 44.60.1 allowedEnv Allowlist Bypass via Shared Preset

Renovate before 44.60.1 contains an allowlist bypass vulnerability that allows repositories to set restricted environment variables by placing env inside a shared preset. Attackers controlling an externally sourced preset can override variables like PATH, LDPRELOAD, NODEOPTIONS, or GITSSLCAINFO i...

CVE-2026-110867 Renovate before 44.60.1 allowedEnv Allowlist Bypass via Shared Preset

Renovate before 44.60.1 contains an allowlist bypass vulnerability that allows repositories to set restricted environment variables by placing env inside a shared preset. Attackers controlling an externally sourced preset can override variables like PATH, LDPRELOAD, NODEOPTIONS, or GITSSLCAINFO i...

CVE-2026-110867 Renovate before 44.60.1 allowedEnv Allowlist Bypass via Shared Preset

Renovate before 44.60.1 contains an allowlist bypass vulnerability that allows repositories to set restricted environment variables by placing env inside a shared preset. Attackers controlling an externally sourced preset can override variables like PATH, LDPRELOAD, NODEOPTIONS, or GITSSLCAINFO i...

CVE-2026-110867

Versions of Renovate prior to 44.60.1 are vulnerable to an allowlist bypass where repositories can set restricted environment variables by embedding them within a shared preset . An attacker who controls an externally sourced preset can override critical environment variables, such as PATH , LD_P...

PT-2026-114181

Name of the Vulnerable Software and Affected Versions Renovate versions prior to 44.60.1 Description An allowlist bypass exists that enables repositories to set restricted environment variables by placing env within a shared preset. This allows attackers who control an externally sourced preset t...

Security update for gimp

This update for gimp fixes the following issue: CVE-2026-97185: out-of-bounds write in GIMPressionist plugin via crafted preset file bsc1282596. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively yo...