Oracle Linux 9 : gegl04 (ELSA-2026-38497)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-38497 advisory. - Fix CVE-2026-2050: buffer overflow in rgbereadnewrle Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 8 : gegl (ELSA-2026-38485)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-38485 advisory. 0.2.0-40 - Fix buffer overflow in rgbereadnewrle CVE-2026-2050 Resolves: RHEL-188260 Tenable has extracted the preceding description block directly from the...

Amazon Linux 2 : gegl, --advisory ALAS2-2026-3183 (ALAS-2026-3183)

The version of gegl installed on the remote host is prior to 0.2.0-19. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3183 advisory. The rgbereadnewrle function in gegl/libs/rgbe/rgbe.c has a heap buffer overflow vulnerability during HDR image parsing that...

Important: gegl

Issue Overview: The rgbereadnewrle function in gegl/libs/rgbe/rgbe.c has a heap buffer overflow vulnerability during HDR image parsing that may allow remote code execution. CVE-2026-2049 When parsing an HDR image file, the function rgbereadnewrle gegl/libs/rgbe/rgbe.c contains HEAP Based Buffer...