There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Pillow is a Python imaging library. From 9.4.0 until 13.0.0, ImagingJpegEncode() in
    src/libImaging/JpegEncode.c can call jpeg_write_marker() for a JPEG COM comment when an ICC profile has
    exactly filled the 65536-byte encoder buffer. libjpeg writes one byte before checking the exhausted
    free_in_buffer counter, which then wraps and permits the attacker-controlled comment and subsequent
    compressed image data to overwrite adjacent heap memory. Re-saving an untrusted image as JPEG while
    preserving its ICC profile and forwarded comment can crash the process and may enable code execution in
    suitable runtime and heap layouts. This issue is fixed in version 13.0.0. (CVE-2026-96778)

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - Pillow 是 Python 图像库。From 9.4.0 until 13.0.0， 当 ICC 配置文件刚好填满 65536 字节编码器缓冲区时，src/libImaging/JpegEncode.c 中的 ImagingJpegEncode（） 可针对 JPEG COM 注释调用 jpeg_write_marker（）。libjpeg 在检查耗尽的 free_in_buffer计数器之前写入一个字节，然后封装并允许攻击者控制的注释和后续的压缩图像数据覆盖相邻的堆内存。将不受信任的图像重新另存为 JPEG，同时保留其 ICC 配置文件和转发的注释可造成进程崩溃，并且可能在适当的运行时和堆布局中实现代码执行。此问题已在 13.0.0 版本中修复。(CVE-2026-96778)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

遠端 Redhat Enterprise Linux 9 主機上安裝的多個套件受到 RHSA-2026:92861 公告中提及的多個弱點影響。

    此公告為 Red Hat Satellite 所使用的受影響套件提供安全性修正。這些更新解決了下面描述的弱點。

    安全性修正：

    * python-django 和 python3.12-django：透過 GeoDjango 空間查找 （CVE-2026-15307） 進行遠端程式碼執行。
    * yggdrasil-worker-forwarder：由於未加密的 HTTP/2 連線，Go net/http 中發生拒絕服務 （CVE-2026-56853）。
    * yggdrasil-worker-forwarder：透過 gRPC-Go （CVE-2026-84445） 中格式錯誤的 RPC 要求造成拒絕服務。
    * yggdrasil-worker-forwarder：透過 crypto/tls （）CVE-2026-97031 中的多個 ECH 外部副檔名參照進行拒絕服務。
    * yggdrasil-worker-forwarder：透過 Go （）CVE-2026-78667 中特製的 HTTP 範圍標頭造成拒絕服務。
    * yggdrasil-worker-forwarder：透過 net/http （）CVE-2026-78669 中過多的 HTTP/2 SETTINGS 框架造成拒絕服務。
    * yggdrasil-worker-forwarder：透過 crypto/x509 中不受信任的中間憑證進行中間人攻擊 （CVE-2026-111943）。
    * yggdrasil-worker-forwarder： golang：透過 multipart 表單剖析 （CVE-2026-94440） 中的記憶體限制繞過來的拒絕服務。
    * openvox-server：透過 Bouncy Castle for Java 中未檢查的 DTLS 交握重組器緩衝區分配造成拒絕服務 （CVE-2026-59646）。
    * openvox-server：透過 jackson-databind （）CVE-2026-68497 中的無限數值剖析造成 CPU 拒絕服務。
    * openvox-server：透過 Jetty （）CVE-2026-19203 中特製的區塊要求走私 HTTP 要求。
    * openvox-server：透過 jackson-core （）CVE-2026-89407 中的規則運算式回溯進行拒絕服務。
    * openvox-server：在 jackson-core （）CVE-2026-89425 中處理格式錯誤的權杖期間，透過無限的 StringBuilder 成長造成拒絕服務。
    * openvox-server：透過 Eclipse Jetty （）CVE-2026-18660 中區分大小寫的主機篩選繞過存取控制。
    * python3.12-urllib3：透過區塊剖析器 （）CVE-2026-97689 中無限記憶體配置造成拒絕服務。
    * python3.12-urllib3：透過 HTTPS 代理 TLS 組態覆寫進行流量攔截 （CVE-2026-97687）。
    * python3.12-gitpython：透過特製的提交作者欄位 （）CVE-2026-87819 進行拒絕服務。
    * python3.12-gitpython：透過日期剖析中的規則運算式回溯造成拒絕服務 （CVE-2026-110856）。
    * python3.12-gitpython： 透過不正確的子模組路徑驗證 （）CVE-2026-114145 執行任意程式碼。
    * python3.12-gitpython：在 （）CVE-2026-110858 之前3.2.0，透過 GitPython 中的 Remote.pull（） refspec 進行命令插入。
    * python3.12-gitpython：透過分支 checkout （CVE-2026-110859） 中的引數插入讀取任意檔案。
    * python3.12-gitpython： 透過不安全的 URL 通訊協定處理 （）CVE-2026-110857 執行任意程式碼。
    * python3.12-gitpython：透過路徑遊走 （）CVE-2026-78677 執行任意程式碼。
    * python-gitpython：透過 Repo.archive（） （CVE-2026-73619） 讀取的任意檔案。
    * python3.12-pillow：ImagingJpegDecode （）CVE-2026-112403 中的堆積緩衝區溢位。
    * python3.12-pillow：FlashPix （FPX） JPEG 解碼中的堆積緩衝區溢位導致程式碼執行 （CVE-2026-112398）。
    * python3.12-pillow：將 TIFF 儲存到 BytesIO 時，_tiffWriteProc 中存在堆積緩衝區溢位 （CVE-2026-112393）。
    * python3.12-pillow：透過 PDF 剖析器 （）CVE-2026-112391 中的無限遞迴造成拒絕服務。
    * python3.12-pillow：透過 MSP 影像解碼器中無限記憶體擴充造成拒絕服務 CVE-2026-112892
    * python3.12-pillow：透過重複的 EXIF 標頭造成拒絕服務 CVE-2026-96643
    * python3.12-pillow：透過 PDF 檔案中的重複頁面參照造成拒絕服務 CVE-2026-96640
    * python3.12-pillow：透過 JPEG 編碼器緩衝區溢位執行任意程式碼 CVE-2026-96778
    * python3.12-pillow：在 PDF 頁面重寫期間透過無限迴圈造成拒絕服務 CVE-2026-112406
    * python3.12-pillow：透過 TIFF 解碼中的越界讀取造成拒絕服務 CVE-2026-112404
    * python3.12-pillow：透過 TIFF 編碼器中的越界讀取造成拒絕服務 CVE-2026-112896
    * python3.12-pillow：透過 TIFF 解碼中未初始化的緩衝區洩露資訊 CVE-2026-112897
    * python3.12-pillow：在字型轉譯期間，透過釋放無效指標造成拒絕服務 CVE-2026-112893
    * python3.12-pillow：影像轉換期間透過雙重釋放造成拒絕服務 CVE-2026-112402
    * python3.12-pillow：在附加作業期間透過特製的 PDF 造成拒絕服務 CVE-2026-112895
    * python3.12-pillow：透過特製的多幀影像轉換造成拒絕服務 CVE-2026-112894
    * python3.12-pillow：透過特製 GIF 影像記憶體耗盡而造成拒絕服務 CVE-2026-112400
    * python3.12-pillow：透過對零寬度影像進行越界記憶體存取造成拒絕服務 CVE-2026-112397
    * python3.12-pillow：透過排名篩選器中的零尺寸影像造成拒絕服務 CVE-2026-112392
    * python3.12-pillow：透過特製的 APNG 影像造成拒絕服務 CVE-2026-112399
    * python3.12-pillow：透過影像合併中 null 指標解除參照的拒絕服務 CVE-2026-112405
    * python3.12-pillow：在特製的 MIC 影像剖析期間，透過無限迴圈造成拒絕服務 CVE-2026-112390
    * python3.12-pillow：透過 PDF 剖析器中的無限遞迴造成拒絕服務 CVE-2026-112391
    * python3.12-brotli：Google Brotli 解碼器 （CVE-2026-111497） 中的越界寫入。

Tenable 已直接從 Red Hat Enterprise Linux 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - Pillow 是一個 Python 映像庫。從 9.4.0 直到 13.0.0，當 ICC 設定檔完全填滿 65536 位元組編碼器緩衝區時，src/libImaging/JpegEncode.c 中的 ImagingJpegEncode（） 可以呼叫 JPEG COM 註解的 jpeg_write_marker（）。 libjpeg 會在檢查用盡的 free_in_buffer 計數器之前寫入一個位元組，然後包裝並允許攻擊者控制的註解和後續壓縮的影像資料覆寫相鄰的堆積記憶體。將不受信任的影像重新儲存為 JPEG，同時保留其 ICC 設定檔和轉寄的註解，可能會使進程當機，並可能以適當的執行階段和堆積配置執行程式碼。13.0.0 版已修正此問題。(CVE-2026-96778)

請注意，Nessus 依賴供應商報告的套件存在。

远程 Redhat Enterprise Linux 9 主机上安装的程序包受到 RHSA-2026:92861 公告中提及的多个漏洞影响。

    此公告为 Red Hat Satellite 所使用的受影响程序包提供安全补丁。此更新解决了如下所述的漏洞。

    安全修复：

    * python-django 和 python3.12-django：通过 GeoDjango 空间查找 （CVE-2026-15307） 进行的远程代码执行。
    * yggdrasil-worker-forwarder：由于未加密的 HTTP/2 连接，Go net/http 中的拒绝服务 （）。CVE-2026-56853
    * yggdrasil-worker-forwarder：通过 gRPC-Go 中的畸形 RPC 请求造成的拒绝服务 （CVE-2026-84445）。
    * yggdrasil-worker-forwarder：通过 crypto/tls （CVE-2026-97031） 中的多个 ECH 外部扩展引用造成拒绝服务。
    * yggdrasil-worker-forwarder：通过在 Go （CVE-2026-78667） 中构建的 HTTP 范围标头造成的拒绝服务。
    * yggdrasil-worker-forwarder：通过 net/http （CVE-2026-78669） 中过多的 HTTP/2 SETTINGS 帧造成拒绝服务。
    * yggdrasil-worker-forwarder：通过 crypto/x509 中不受信任的中间证书发起中间人攻击 （CVE-2026-111943）。
    * yggdrasil-worker-forwarder： golang：通过多部分表单解析 （CVE-2026-94440） 中的内存限制绕过导致拒绝服务。
    * openvox-server：在 Java 的 Bouncy Castle 中未经检查的 DTLS 握手重组器缓冲区分配导致拒绝服务 （CVE-2026-59646）。
    * openvox-server：jackson-databind （）CVE-2026-68497 中通过不受限制的数值解析导致 CPU 拒绝服务。
    * openvox-server：通过 Jetty 中构建的分块请求走私 HTTP 请求 （CVE-2026-19203）。
    * openvox-server：jackson-core （CVE-2026-89407） 中的正则表达式回溯导致拒绝服务。
    * openvox-server：jackson-core （）CVE-2026-89425 中畸形标记处理期间通过不受限制的 StringBuilder 增长导致拒绝服务。
    * openvox-server：通过 Eclipse Jetty 中区分大小写的主机过滤造成的访问控制绕过 （CVE-2026-18660）。
    * python3.12-urllib3：通过区块解析器 （）CVE-2026-97689 中不受限制的内存分配导致的拒绝服务。
    * python3.12-urllib3：通过 HTTPS 代理 TLS 配置替代 （）CVE-2026-97687 进行流量拦截。
    * python3.12-gitpython：通过构建的提交作者字段 （CVE-2026-87819） 造成拒绝服务。
    * python3.12-gitpython：通过日期解析中的正则表达式回溯导致拒绝服务 （CVE-2026-110856）。
    * python3.12-gitpython：通过不当的子模块路径验证执行任意代码 （CVE-2026-114145）。
    * python3.12-gitpython：通过 （）CVE-2026-110858 之前3.2.0的 GitPython 中的 Remote.pull（） refspec 注入命令。
    * python3.12-gitpython：通过分支检出 （CVE-2026-110859） 中的参数注入读取任意文件。
    * python3.12-gitpython：通过不安全的 URL 协议处理执行任意代码 （CVE-2026-110857）。
    * python3.12-gitpython：通过路径遍历 （）CVE-2026-78677 执行任意代码。
    * python-gitpython：通过 Repo.archive（） 读取任意文件 （CVE-2026-73619）。
    * python3.12-pillow：ImagingJpegDecode （CVE-2026-112403） 中的堆缓冲区溢出。
    * python3.12-pillow：FlashPix （FPX） JPEG 解码中的堆缓冲区溢出导致代码执行 （CVE-2026-112398）。
    * python3.12-pillow：将 TIFF 保存到 BytesIO 时，_tiffWriteProc 中的堆缓冲区溢出 （CVE-2026-112393）。
    * python3.12-pillow：通过 PDF 解析器 （）CVE-2026-112391 中不受限制的递归导致的拒绝服务。
    * python3.12-pillow：通过 MSP 图像解码器中的无限内存扩展导致的拒绝服务 CVE-2026-112892
    * python3.12-pillow：通过重复 EXIF 标头造成的拒绝服务 CVE-2026-96643
    * python3.12-pillow：通过 PDF 文件中的重复页面引用造成拒绝服务 CVE-2026-96640
    * python3.12-pillow：通过 JPEG 编码器缓冲区溢出执行任意代码 CVE-2026-96778
    * python3.12-pillow：PDF 页面重写期间通过无限循环导致拒绝服务 CVE-2026-112406
    * python3.12-pillow：通过 TIFF 解码中的越界读取造成拒绝服务 CVE-2026-112404
    * python3.12-pillow：通过 TIFF 编码器中的越界读取造成拒绝服务 CVE-2026-112896
    * python3.12-pillow：通过 TIFF 解码中未初始化的缓冲区泄露信息 CVE-2026-112897
    * python3.12-pillow：通过字体渲染期间释放无效指针造成拒绝服务 CVE-2026-112893
    * python3.12-pillow：图像转换期间通过双重释放导致拒绝服务 CVE-2026-112402
    * python3.12-pillow：附加操作期间通过构建的 PDF 造成拒绝服务 CVE-2026-112895
    * python3.12-pillow：通过构建的多帧图像转换造成拒绝服务 CVE-2026-112894
    * python3.12-pillow：通过构建的 GIF 图像造成的内存耗尽导致拒绝服务 CVE-2026-112400
    * python3.12-pillow：通过对零宽度图像进行越界内存访问造成拒绝服务 CVE-2026-112397
    * python3.12-pillow：通过排名过滤器中的零大小图像造成拒绝服务 CVE-2026-112392
    * python3.12-pillow：通过构建的 APNG 图像造成拒绝服务 CVE-2026-112399
    * python3.12-pillow：图像合并中的空指针取消引用导致拒绝服务 CVE-2026-112405
    * python3.12-pillow：在构建的 MIC 图像解析期间，通过无限循环导致拒绝服务 CVE-2026-112390
    * python3.12-pillow：通过 PDF 解析器中未限制边界的递归造成拒绝服务 CVE-2026-112391
    * python3.12-brotli：Google Brotli 解码器中的越界写入 （CVE-2026-111497）。

Tenable 已直接从 Red Hat Enterprise Linux 安全公告中提取上述描述块。

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - Pillow は Python イメージングライブラリです。9.4.0から13.0.0まで、ICCプロファイルが65536バイトのエンコーダーバッファを正確に埋めたとき、src/libImaging/JpegEncode.cのImagingJpegEncode()がJPEG COMコメントに対してjpeg_write_marker()を呼び出すことができます。 libjpegは、使い果たされたfree_in_bufferカウンターをチェックする前に1バイトを書き込みます。こうすることで、攻撃者が制御するコメントとその後の圧縮イメージデータがラップされ、隣接するヒープメモリを上書きできるようになります。ICC プロファイルと転送されたコメントを保存したまま信頼できない画像を JPEG として再保存すると、プロセスがクラッシュしたり、適切なランタイムとヒープレイアウトでコードが実行できるようになる可能性があります。この問題はバージョン 13.0.0 で修正されています。(CVE-2026-96778)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

リモートホストにインストールされている FreeBSD のバージョンは、テスト済みバージョンより前です。したがって、b9a3fd21-d2af-11f1-bae2-3497f65b111b のアドバイザリに記載されている複数の脆弱性の影響を受けます。

    Pillowプロジェクトは、リリース 13.0.0で修正された問題に関するセキュリティアドバイザリを公開しました。これには、EPSイメージに使用されるGhostscript呼び出しでの引数インジェクション、コード実行につながる可能性のあるいくつかのイメージデコーダーのヒープバッファオーバーフロー、細工されたイメージファイルを開くときの無限ループと無制限のメモリ使用などが含まれます。

Tenable は、前述の記述ブロックを FreeBSD セキュリティアドバイザリから直接抽出しています。

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

リモートの Redhat Enterprise Linux 9 ホストに、RHSA-2026:92861 アドバイザリに記載されている複数の脆弱性の影響を受けるパッケージがインストールされています。

    このアドバイザリでは、影響を受ける Red Hat Satellite によって使用されるパッケージのセキュリティ修正を提供します。この更新プログラムは、次に説明されている脆弱性に対処します。

    セキュリティ修正:

    * python-django および python3.12-django:GeoDjango の空間検索によるリモートコードの実行(CVE-2026-15307)。
    * yggdrasil-worker-forwarder:暗号化されていない HTTP/2 接続による Go net/http でのサービス拒否(CVE-2026-56853)。
    * yggdrasil-worker-forwarder:gRPC-Go での無効な形式の RPC リクエストによるサービス拒否(CVE-2026-84445)。
    * yggdrasil-worker-forwarder:crypto/tls(CVE-2026-97031)の複数の ECH 外部拡張参照によるサービス拒否。
    * yggdrasil-worker-forwarder:Go の細工された HTTP Range ヘッダーを介したサービス拒否(CVE-2026-78667)。
    * yggdrasil-worker-forwarder:net/http の過剰な HTTP/2 SETTINGS フレームによるサービス拒否(CVE-2026-78669)。
    * yggdrasil-worker-forwarder:crypto/x509 の信頼できない中間証明書を介した中間者攻撃(CVE-2026-111943)。
    * yggdrasil-worker-forwarder:golang:マルチパートフォーム解析におけるメモリ制限バイパスによるサービス拒否(CVE-2026-94440)。
    * openvox-server:Java 用の Bouncy Castle での未チェックの DTLS ハンドシェイクリアセンブラバッファ割り当てによるサービス拒否(CVE-2026-59646)。
    * openvox-server:jackson-databind における際限のない数値解析による CPU サービス拒否(CVE-2026-68497)。
    * openvox-server:Jetty での細工されたチャンクリクエストを介したリクエストスマグリングをHTTPします(CVE-2026-19203)。
    * openvox-server:jackson-core における正規表現バックトラックを介したサービス拒否(CVE-2026-89407)。
    * openvox-server:jackson-core での無効な形式のトークン処理中の際限のない StringBuilder 増加によるサービス拒否(CVE-2026-89425)。
    * openvox-server:Eclipse Jetty の大文字小文字を区別するホストフィルタリングを通じたアクセスコントロールのバイパス(CVE-2026-18660)。
    * python3.12-urllib3:チャンクパーサーにおける際限のないメモリ割り当てによるサービス拒否(CVE-2026-97689)。
    * python3.12-urllib3:プロキシTLS構成オーバーライドHTTPSトラフィック傍受(CVE-2026-97687)。
    * python3.12-gitpython:細工されたコミット作成者フィールドを介したサービス拒否(CVE-2026-87819)。
    * python3.12-gitpython:日付解析での正規表現バックトラッキングを介したサービス拒否(CVE-2026-110856)。
    * python3.12-gitpython:不適切なサブモジュールパス検証による任意のコードの実行(CVE-2026-114145)。
    * python3.12-gitpython: 3.2.0 前の GitPython の Remote.pull() refspec によるコマンドインジェクション(CVE-2026-110858)。
    * python3.12-gitpython:ブランチチェックアウトでの引数インジェクションによる任意のファイルの読み取り(CVE-2026-110859)。
    * python3.12-gitpython:安全でない URL プロトコル処理による任意のコードの実行(CVE-2026-110857)。
    * python3.12-gitpython:パストラバーサルによる任意のコードの実行(CVE-2026-78677)。
    * python-gitpython:Repo.archive() を介した任意のファイルの読み込み(CVE-2026-73619)。
    * python3.12-pillow:ImagingJpegDecode のヒープバッファオーバーフロー(CVE-2026-112403)。
    * python3.12-pillow:コードの実行を引き起こす FlashPix(FPX)JPEG デコーディングにおけるヒープバッファオーバーフロー(CVE-2026-112398)。
    * python3.12-pillow:TIFF を BytesIO に保存する際の _tiffWriteProc におけるヒープバッファオーバーフロー(CVE-2026-112393)。
    * python3.12-pillow:PDF パーサーの無限再帰によるサービス拒否(CVE-2026-112391)。
    * python3.12-pillow:MSP 画像デコーダーにおける際限のないメモリ拡張によるサービス拒否 CVE-2026-112892
    * python3.12-pillow:EXIF ヘッダーの繰り返しによるサービス拒否 CVE-2026-96643
    * python3.12-pillow:PDF ファイルの重複ページ参照によるサービス拒否 CVE-2026-96640
    * python3.12-pillow:JPEG エンコーダーのバッファオーバーフローによる任意のコードの実行 CVE-2026-96778
    * python3.12-pillow:PDF ページリライト中の無限ループによるサービス拒否 CVE-2026-112406
    * python3.12-pillow:TIFF デコーディングにおける領域外読み取りによるサービス拒否 CVE-2026-112404
    * python3.12-pillow:TIFF エンコーダーでの領域外読み取りによるサービス拒否 CVE-2026-112896
    * python3.12-pillow:TIFF デコーディングにおける初期化されていないバッファによる情報漏洩 CVE-2026-112897
    * python3.12-pillow:フォントレンダリング中の無効なポインター解放によるサービス拒否 CVE-2026-112893
    * python3.12-pillow:画像変換中の二重解放によるサービス拒否 CVE-2026-112402
    * python3.12-pillow:付加操作中の細工された PDF によるサービス拒否 CVE-2026-112895
    * python3.12-pillow:細工されたマルチフレーム画像変換によるサービス拒否 CVE-2026-112894
    * python3.12-pillow:細工された GIF 画像からのメモリ枯渇によるサービス拒否 CVE-2026-112400
    * python3.12-pillow:ゼロ幅画像での領域外メモリアクセスによるサービス拒否 CVE-2026-112397
    * python3.12-pillow:ランクフィルターのゼロサイズ画像によるサービス拒否 CVE-2026-112392
    * python3.12-pillow:細工された APNG 画像によるサービス拒否 CVE-2026-112399
    * python3.12-pillow:画像マージの NULL ポインターデリファレンスによるサービス拒否 CVE-2026-112405
    * python3.12-pillow:細工された MIC 画像解析中の無限ループによるサービス拒否 CVE-2026-112390
    * python3.12-pillow:PDF パーサーの無限再帰によるサービス拒否 CVE-2026-112391
    * python3.12-brotli:Google Brotli デコーダーの領域外書き込み(CVE-2026-111497)。

Tenable は、前述の記述ブロックを Red Hat Enterprise Linux セキュリティアドバイザリから直接抽出しています。

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95655 advisory.

    This advisory provides security fixes for affected packages used by Red Hat Satellite. The updates address     the vulnerabilities described below.

    Security Fix(es):

    * python-django: Django: Remote code execution via GeoDjango spatial lookups (CVE-2026-15307)
    * python-urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser     (CVE-2026-97689)
    * python-urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override     (CVE-2026-97687)
    * python-gitpython: GitPython: Arbitrary code execution via unsafe URL protocol handling (CVE-2026-110857)
    * python-gitpython: GitPython: Arbitrary file read via argument injection in branch checkout     (CVE-2026-110859)
    * python-gitpython: GitPython: Denial of Service via regular expression backtracking in date parsing     (CVE-2026-110856)
    * python-gitpython: GitPython: Arbitrary file read vulnerability via `Repo.archive()` (CVE-2026-73619)
    * satellite-capsule:el8/python-gitpython: GitPython: Arbitrary file read vulnerability via     `Repo.archive()` (CVE-2026-73619)
    * python-pillow: Pillow: Denial of Service via unbounded recursion in PDF parser (CVE-2026-112391)
    * python-pillow: Pillow: Denial of Service via infinite loop during crafted MIC image parsing     (CVE-2026-112390)
    * python-pillow: Pillow: Denial of Service via null pointer dereference in Image.merge() (CVE-2026-112405)
    * python-pillow: pillow: Denial of service via crafted APNG image (CVE-2026-112399)
    * python-pillow: pillow: Denial of Service via zero-size images in rank filters (CVE-2026-112392)
    * python-pillow: pillow: Denial of Service via out-of-bounds memory access on zero-width images     (CVE-2026-112397)
    * python-pillow: pillow: Denial of Service via memory exhaustion from crafted GIF image (CVE-2026-112400)
    * python-pillow: pillow: Denial of Service via crafted multi-frame image conversion (CVE-2026-112894)
    * python-pillow: pillow: Denial of service via crafted PDF during append operations (CVE-2026-112895)
    * python-pillow: pillow: Denial of service via double free during image transformation (CVE-2026-112402)
    * python-pillow: Pillow: Denial of Service via invalid pointer free during font rendering     (CVE-2026-112893)
    * python-pillow: pillow: Information disclosure via uninitialized buffer in TIFF decoding     (CVE-2026-112897)
    * python-pillow: Pillow: Denial of Service via out-of-bounds read in TIFF encoder (CVE-2026-112896)
    * python-pillow: Pillow: Denial of Service via out-of-bounds read in TIFF decoding (CVE-2026-112404)
    * python-gitpython: GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() Refspec     (CVE-2026-110858)
    * python-pillow: pillow: Denial of Service via infinite loop during PDF page rewriting (CVE-2026-112406)
    * python-pillow: pillow: Arbitrary code execution via JPEG encoder buffer overflow (CVE-2026-96778)
    * python-gitpython: GitPython: arbitrary code execution via improper submodule path validation     (CVE-2026-114145)
    * python-pillow: pillow: Denial of Service via duplicate page references in PDF files (CVE-2026-96640)
    * python-pillow: pillow: Denial of Service via repeated EXIF headers (CVE-2026-96643)
    * python-brotli: Out-of-Bounds Write in Google Brotli Decoder (CVE-2026-111497)
    * python-pillow: pillow: Denial of Service via unbounded memory expansion in MSP image decoder     (CVE-2026-112892)
    * python-pillow: Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO     (CVE-2026-112393)
    * python-pillow: Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution     (CVE-2026-112398)
    * python-pillow: Pillow: Heap buffer overflow in ImagingJpegDecode (CVE-2026-112403)
    * openvox-server: puppetserver: authenticated remote code execution via report event deserialization     (CVE-2026-115731)
    * puppetserver: puppetserver: authenticated remote code execution via report event deserialization     (CVE-2026-115731)
    * openvox-server: trapperkeeper-authorization: certificate name authorization bypass via flawed hostname     ACL match (CVE-2026-115732)
    * puppetserver: trapperkeeper-authorization: certificate name authorization bypass via flawed hostname ACL     match (CVE-2026-115732)
    * openvox-agent: integer overflow issue in regular expression compiler (CVE-2026-110264)
    * openvox-agent: integer overflow issue in CI/CD regular expression compiler (CVE-2026-97229)
    * openvox-agent: integer overflow issue in regular expression compiler (CVE-2026-93577)
    * openvox-agent: double free issue in regular expression parser (CVE-2026-89078)
    * openvox-server: jackson-dataformat-smile: Denial of Service via unbounded memory allocation in     asynchronous parser (CVE-2026-104895)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Pillow is a Python imaging library. From 9.4.0 until 13.0.0, ImagingJpegEncode() in     src/libImaging/JpegEncode.c can call jpeg_write_marker() for a JPEG COM comment when an ICC profile has     exactly filled the 65536-byte encoder buffer. libjpeg writes one byte before checking the exhausted     free_in_buffer counter, which then wraps and permits the attacker-controlled comment and subsequent     compressed image data to overwrite adjacent heap memory. Re-saving an untrusted image as JPEG while     preserving its ICC profile and forwarded comment can crash the process and may enable code execution in     suitable runtime and heap layouts. This issue is fixed in version 13.0.0. (CVE-2026-96778)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the b9a3fd21-d2af-11f1-bae2-3497f65b111b advisory.

    The Pillow project published security advisories for issues fixed               in release 13.0.0.  They include an argument injection in the               Ghostscript call used for EPS images, heap buffer overflows in               several image decoders that can lead to code execution, and               infinite loops and unbounded memory use when opening crafted               image files.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95656 advisory.

    This advisory provides security fixes for affected packages used by Red Hat     Satellite. The updates address the vulnerabilities described below.

    Security Fix(es):

    * python-django: Django: Remote code execution via GeoDjango spatial lookups (CVE-2026-15307)
    * python-gitpython: GitPython: Arbitrary Code Execution via Path Traversal (CVE-2026-78677)
    * python-gitpython: GitPython: Denial of Service via crafted commit author field (CVE-2026-87819)
    * python-urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser     (CVE-2026-97689)
    * python-urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override     (CVE-2026-97687)
    * python-gitpython: GitPython: Arbitrary code execution via unsafe URL protocol handling (CVE-2026-110857)
    * python-gitpython: GitPython: Arbitrary file read via argument injection in branch checkout     (CVE-2026-110859)
    * python-gitpython: GitPython: Denial of Service via regular expression backtracking in date parsing     (CVE-2026-110856)
    * python-gitpython: GitPython: Arbitrary file read vulnerability via `Repo.archive()` (CVE-2026-73619)
    * python-pillow: Pillow: Denial of Service via unbounded recursion in PDF parser (CVE-2026-112391)
    * python-pillow: Pillow: Denial of Service via infinite loop during crafted MIC image parsing     (CVE-2026-112390)
    * python-pillow: Pillow: Denial of Service via null pointer dereference in Image.merge() (CVE-2026-112405)
    * python-pillow: pillow: Denial of service via crafted APNG image (CVE-2026-112399)
    * python-pillow: pillow: Denial of Service via zero-size images in rank filters (CVE-2026-112392)
    * python-pillow: pillow: Denial of Service via out-of-bounds memory access on zero-width images     (CVE-2026-112397)
    * python-pillow: pillow: Denial of Service via memory exhaustion from crafted GIF image (CVE-2026-112400)
    * python-pillow: pillow: Denial of Service via crafted multi-frame image conversion (CVE-2026-112894)
    * python-pillow: pillow: Denial of service via crafted PDF during append operations (CVE-2026-112895)
    * python-pillow: pillow: Denial of service via double free during image transformation (CVE-2026-112402)
    * python-pillow: Pillow: Denial of Service via invalid pointer free during font rendering     (CVE-2026-112893)
    * python-pillow: pillow: Information disclosure via uninitialized buffer in TIFF decoding     (CVE-2026-112897)
    * python-pillow: Pillow: Denial of Service via out-of-bounds read in TIFF encoder (CVE-2026-112896)
    * python-pillow: Pillow: Denial of Service via out-of-bounds read in TIFF decoding (CVE-2026-112404)
    * python-gitpython: GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() Refspec     (CVE-2026-110858)
    * python-pillow: pillow: Denial of Service via infinite loop during PDF page rewriting (CVE-2026-112406)
    * python-pillow: pillow: Arbitrary code execution via JPEG encoder buffer overflow (CVE-2026-96778)
    * python-gitpython: GitPython: arbitrary code execution via improper submodule path validation     (CVE-2026-114145)
    * python-pillow: pillow: Denial of Service via duplicate page references in PDF files (CVE-2026-96640)
    * python-pillow: pillow: Denial of Service via repeated EXIF headers (CVE-2026-96643)
    * python-brotli: Out-of-Bounds Write in Google Brotli Decoder (CVE-2026-111497)
    * python-pillow: pillow: Denial of Service via unbounded memory expansion in MSP image decoder     (CVE-2026-112892)
    * python-pillow: Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO     (CVE-2026-112393)
    * python-pillow: Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution     (CVE-2026-112398)
    * python-pillow: Pillow: Heap buffer overflow in ImagingJpegDecode (CVE-2026-112403)
    * openvox-server: puppetserver: authenticated remote code execution via report event deserialization     (CVE-2026-115731)
    * puppetserver: puppetserver: authenticated remote code execution via report event deserialization     (CVE-2026-115731)
    * puppetserver: trapperkeeper-authorization: certificate name authorization bypass via flawed hostname ACL     match (CVE-2026-115732)
    * openvox-server: trapperkeeper-authorization: certificate name authorization bypass via flawed hostname     ACL match (CVE-2026-115732)
    * openvox-agent: integer overflow issueCVE-2026-89078 in regular expression compiler (CVE-2026-110264)
    * openvox-agent: integer overflow issue in CI/CD regular expression compiler (CVE-2026-97229)
    * openvox-agent: integer overflow issue in regular expression compiler (CVE-2026-93577)
    * openvox-agent: double free issue in regular expression parser (CVE-2026-89078)
    * openvox-server: jackson-dataformat-smile: Denial of Service via unbounded memory allocation in     asynchronous parser (CVE-2026-104895)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3411 advisory.

    Pillow is a Python imaging library. From 7.2.0 until 13.0.0, Pillow can enter an infinite loop while     determining the frame count of a MIC image. MicImageFile inherits TIFF frame traversal, but     MicImageFile.tell reports the OLE stream index and its seek() resets TIFF frame state, so an embedded TIFF     with at least three IFDs never advances. When an application with olefile installed reads n_frames or     saves all frames from a crafted MIC file, the non-advancing traversal can hold a worker at full CPU     indefinitely. This issue is fixed in version 13.0.0. (CVE-2026-112390)

    Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid     image storage for a zero-size image. ImagingExpand() allocates a non-empty output and then faults while     replicating edges by reading the first pixel from empty input storage; ImagingRankFilter is never reached.
    An attacker can supply or cause creation of a zero-size image to an application that applies a rank,     median, minimum, or maximum filter. This causes a native process crash. This issue is fixed in version     13.0.0. (CVE-2026-112392)

    Pillow is a Python imaging library. From 2.0.0 until 13.0.0, Pillow has a heap buffer overflow and stale-     heap disclosure in _tiffWriteProc when saving compressed TIFF data through libtiff to a target without a     usable fileno(), such as BytesIO. The callback sizes its allocation from the prior buffer size instead of     the current write position, allowing an attacker-controlled out-of-line TIFF tag or retained ICC profile     to be copied beyond the allocation after libtiff seeks forward. This overflow can crash the process and     may allow code execution. Independently, unwritten alignment gaps in compressed TIFF output larger than 64     KiB can disclose stale heap bytes without a crafted tag. File paths and targets with real file descriptors     are unaffected. This issue is fixed in version 13.0.0. (CVE-2026-112393)

    Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix JPEG-tile decoder can write decoded     scanlines beyond the allocated tile buffer. FlashPix (FPX) JPEG decoding selects raw mode LA with two     bytes per pixel, while an unrecognized JPEG mode can be decoded as JCS_UNKNOWN with four components,     causing ImagingJpegDecode to write four-component scanlines into the two-byte tile buffer. An attacker can     supply a crafted OLE2 FlashPix file to an application with the optional olefile dependency installed that     opens or thumbnails untrusted input. This can corrupt heap memory and may allow arbitrary code execution.
    This issue is fixed in version 13.0.0. (CVE-2026-112398)

    Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow can allocate an APNG disposal     background at the full canvas size before applying the decompression-bomb check. A crafted APNG with a     small first frame, a very large declared canvas, and background disposal or first-frame OP_PREVIOUS     reaches PngImageFile._seek while Image.open() positions frame zero. The full-canvas allocation occurs     inside Image.open() without requiring pixel loading or frame iteration. This can exhaust memory and deny     service. This issue is fixed in version 13.0.0. (CVE-2026-112399)

    Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow takes quadratic time to reserve PDF     object identifiers when saving many frames with save_all enabled. PdfParser.next_object_id() repeatedly     rebuilds and scans all previously reserved identifiers for every object. An attacker can supply a multi-     frame image, including a small APNG with a large declared frame count, to an application that converts it     to a multipage PDF. This can consume excessive CPU and deny service. This issue is fixed in version     13.0.0. (CVE-2026-112894)

    Pillow is a Python imaging library. Prior to 13.0.0, Pillow's TIFF encoder can read beyond a ColorMap     buffer when retained TIFF metadata has a plane size inconsistent with BitsPerSample. A small TIFF can be     opened normally and then retain a crafted ColorMap that is reused when the image is saved. An application     that re-encodes the attacker's TIFF with libtiff can trigger the out-of-bounds read. This can disclose     heap memory in the output or crash the process. This issue is fixed in version 13.0.0. (CVE-2026-112896)

    Pillow is a Python imaging library. From 5.3.0 until 13.0.0, Pillow can return uninitialized memory as     pixels when libtiff performs a short decode of JPEG-compressed or Group 4 fax TIFF data. The _decodeStrip     and _decodeTile buffers can be larger than the bytes written by libtiff, but Pillow converts the expected     rows without clearing the unwritten tail. The tile path is affected from 5.3.0 and the strip path from     6.0.0. An attacker can supply a crafted TIFF to an application that loads and returns or re-encodes its     pixels. This can disclose stale heap contents without memory corruption or a process crash. This issue is     fixed in version 13.0.0. (CVE-2026-112897)

    Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument injection     when invoking Ghostscript for EPS input. EpsImagePlugin.Ghostscript passes a caller-controlled input     filename after -f without converting it to a safe absolute path, so a name beginning with a hyphen can be     interpreted as a Ghostscript option. An attacker who controls the filename can inject Ghostscript     arguments. Arbitrary command execution specifically requires a leading @ argument-file filename and     control of the referenced text file containing additional Ghostscript arguments; the reported chain     reproduces with the default -dSAFER invocation. This issue is fixed in version 13.0.0. (CVE-2026-112900)

    Pillow is a Python imaging library. Prior to 13.0.0, Pillow's XBM header parser is vulnerable to regular-     expression denial of service. In XbmImageFile._open, when an application calls Image.open() on a small     crafted XBM file, XbmImagePlugin applies a backtracking expression to the attacker-controlled header     before image dimensions are accepted, stalling a worker for minutes and denying service. This issue is     fixed in version 13.0.0. (CVE-2026-112901)

    Pillow is a Python imaging library. From 9.4.0 until 13.0.0, ImagingJpegEncode() in     src/libImaging/JpegEncode.c can call jpeg_write_marker() for a JPEG COM comment when an ICC profile has     exactly filled the 65536-byte encoder buffer. libjpeg writes one byte before checking the exhausted     free_in_buffer counter, which then wraps and permits the attacker-controlled comment and subsequent     compressed image data to overwrite adjacent heap memory. Re-saving an untrusted image as JPEG while     preserving its ICC profile and forwarded comment can crash the process and may enable code execution in     suitable runtime and heap layouts. This issue is fixed in version 13.0.0. (CVE-2026-96778)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:92861 advisory.

    This advisory provides security fixes for affected packages used by Red Hat Satellite. The updates address     the vulnerabilities described below.

    Security Fix(es):

    * python-django and python3.12-django: Remote code execution via GeoDjango spatial lookups     (CVE-2026-15307).
    * yggdrasil-worker-forwarder: Denial of Service in Go net/http due to unencrypted HTTP/2 connections     (CVE-2026-56853).
    * yggdrasil-worker-forwarder: Denial of Service via malformed RPC requests in gRPC-Go (CVE-2026-84445).
    * yggdrasil-worker-forwarder: Denial of Service via multiple ECH outer extension references in crypto/tls     (CVE-2026-97031).
    * yggdrasil-worker-forwarder: Denial of Service via crafted HTTP Range headers in Go (CVE-2026-78667).
    * yggdrasil-worker-forwarder: Denial of Service via excessive HTTP/2 SETTINGS frames in net/http     (CVE-2026-78669).
    * yggdrasil-worker-forwarder: Man-in-the-middle attacks via untrusted intermediate certificates in     crypto/x509 (CVE-2026-111943).
    * yggdrasil-worker-forwarder: golang: Denial of Service via memory limit bypass in multipart form parsing     (CVE-2026-94440).
    * openvox-server: Denial of Service via unchecked DTLS handshake reassembler buffer allocation in Bouncy     Castle for Java (CVE-2026-59646).
    * openvox-server: CPU Denial of Service via unbounded numeric parsing in jackson-databind     (CVE-2026-68497).
    * openvox-server: HTTP request smuggling via crafted chunked requests in Jetty (CVE-2026-19203).
    * openvox-server: Denial of Service via regular expression backtracking in jackson-core (CVE-2026-89407).
    * openvox-server: Denial of Service via unbounded StringBuilder growth during malformed token processing     in jackson-core (CVE-2026-89425).
    * openvox-server: Access control bypass via case-sensitive host filtering in Eclipse Jetty     (CVE-2026-18660).
    * python3.12-urllib3: Denial of Service via unbounded memory allocation in the chunk parser     (CVE-2026-97689).
    * python3.12-urllib3: Traffic interception via HTTPS proxy TLS configuration override (CVE-2026-97687).
    * python3.12-gitpython: Denial of Service via a crafted commit author field (CVE-2026-87819).
    * python3.12-gitpython: Denial of Service via regular expression backtracking in date parsing     (CVE-2026-110856).
    * python3.12-gitpython: Arbitrary code execution via improper submodule path validation (CVE-2026-114145).
    * python3.12-gitpython: Command injection via Remote.pull() refspec in GitPython before 3.2.0     (CVE-2026-110858).
    * python3.12-gitpython: Arbitrary file read via argument injection in branch checkout (CVE-2026-110859).
    * python3.12-gitpython: Arbitrary code execution via unsafe URL protocol handling (CVE-2026-110857).
    * python3.12-gitpython: Arbitrary code execution via path traversal (CVE-2026-78677).
    * python-gitpython: Arbitrary file read via Repo.archive() (CVE-2026-73619).
    * python3.12-pillow: Heap buffer overflow in ImagingJpegDecode (CVE-2026-112403).
    * python3.12-pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leading to code execution     (CVE-2026-112398).
    * python3.12-pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO (CVE-2026-112393).
    * python3.12-pillow: Denial of Service via unbounded recursion in the PDF parser (CVE-2026-112391).
    * python3.12-pillow: Denial of Service via unbounded memory expansion in MSP image decoder CVE-2026-112892
    * python3.12-pillow: Denial of Service via repeated EXIF headers CVE-2026-96643
    * python3.12-pillow: Denial of Service via duplicate page references in PDF files CVE-2026-96640
    * python3.12-pillow: Arbitrary code execution via JPEG encoder buffer overflow CVE-2026-96778
    * python3.12-pillow: Denial of Service via infinite loop during PDF page rewriting CVE-2026-112406
    * python3.12-pillow: Denial of Service via out-of-bounds read in TIFF decoding CVE-2026-112404
    * python3.12-pillow: Denial of Service via out-of-bounds read in TIFF encoder CVE-2026-112896
    * python3.12-pillow: Information disclosure via uninitialized buffer in TIFF decoding CVE-2026-112897
    * python3.12-pillow: Denial of Service via invalid pointer free during font rendering CVE-2026-112893
    * python3.12-pillow: Denial of Service via double free during image transformation CVE-2026-112402
    * python3.12-pillow: Denial of Service via crafted PDF during append operations CVE-2026-112895
    * python3.12-pillow: Denial of Service via crafted multi-frame image conversion CVE-2026-112894
    * python3.12-pillow: Denial of Service via memory exhaustion from crafted GIF image CVE-2026-112400
    * python3.12-pillow: Denial of Service via out-of-bounds memory access on zero-width images     CVE-2026-112397
    * python3.12-pillow: Denial of Service via zero-size images in rank filters CVE-2026-112392
    * python3.12-pillow: Denial of Service via crafted APNG image CVE-2026-112399
    * python3.12-pillow: Denial of Service via null pointer dereference in Image merge CVE-2026-112405
    * python3.12-pillow: Denial of Service via infinite loop during crafted MIC image parsing CVE-2026-112390
    * python3.12-pillow: Denial of Service via unbounded recursion in PDF parser CVE-2026-112391
    * python3.12-brotli: Out-of-bounds write in the Google Brotli decoder (CVE-2026-111497).

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95657 advisory.

    This advisory provides security fixes for affected packages used by Red Hat     Satellite. The updates address the vulnerabilities described below.

    Security Fix(es):

    * python3.12-django: Django: Remote code execution via GeoDjango spatial lookups (CVE-2026-15307)
    * python3.12-brotli: Out-of-Bounds Write in Google Brotli Decoder (CVE-2026-111497)
    * python3.12-urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override     (CVE-2026-97687)
    * python3.12-urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser     (CVE-2026-97689)
    * python3.12-pillow: pillow: Denial of Service via duplicate page references in PDF files (CVE-2026-96640)
    * python3.12-pillow: pillow: Denial of Service via repeated EXIF headers (CVE-2026-96643)
    * python3.12-pillow: pillow: Arbitrary code execution via JPEG encoder buffer overflow (CVE-2026-96778)
    * python3.12-pillow: Pillow: Denial of Service via infinite loop during crafted MIC image parsing     (CVE-2026-112390)
    * python3.12-pillow: Pillow: Denial of Service via unbounded recursion in PDF parser (CVE-2026-112391)
    * python3.12-pillow: pillow: Denial of Service via zero-size images in rank filters (CVE-2026-112392)
    * python3.12-pillow: Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO     (CVE-2026-112393)
    * python3.12-pillow: pillow: Denial of Service via out-of-bounds memory access on zero-width images     (CVE-2026-112397)
    * python3.12-pillow: Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution     (CVE-2026-112398)
    * python3.12-pillow: pillow: Denial of service via crafted APNG image (CVE-2026-112399)
    * python3.12-pillow: pillow: Denial of Service via memory exhaustion from crafted GIF image     (CVE-2026-112400)
    * python3.12-pillow: pillow: Denial of service via double free during image transformation     (CVE-2026-112402)
    * python3.12-pillow: Pillow: Heap buffer overflow in ImagingJpegDecode (CVE-2026-112403)
    * python3.12-pillow: Pillow: Denial of Service via out-of-bounds read in TIFF decoding (CVE-2026-112404)
    * python3.12-pillow: Pillow: Denial of Service via null pointer dereference in Image.merge()     (CVE-2026-112405)
    * python3.12-pillow: pillow: Denial of Service via infinite loop during PDF page rewriting     (CVE-2026-112406)
    * python3.12-pillow: pillow: Denial of Service via unbounded memory expansion in MSP image decoder     (CVE-2026-112892)
    * python3.12-pillow: Pillow: Denial of Service via invalid pointer free during font rendering     (CVE-2026-112893)
    * python3.12-pillow: pillow: Denial of Service via crafted multi-frame image conversion (CVE-2026-112894)
    * python3.12-pillow: pillow: Denial of service via crafted PDF during append operations (CVE-2026-112895)
    * python3.12-pillow: Pillow: Denial of Service via out-of-bounds read in TIFF encoder (CVE-2026-112896)
    * python3.12-pillow: pillow: Information disclosure via uninitialized buffer in TIFF decoding     (CVE-2026-112897)
    * python-gitpython: GitPython: Arbitrary file read vulnerability via `Repo.archive()` (CVE-2026-73619)
    * python3.12-gitpython: GitPython: Arbitrary Code Execution via Path Traversal (CVE-2026-78677)
    * python3.12-gitpython: GitPython: Denial of Service via crafted commit author field (CVE-2026-87819)
    * python3.12-gitpython: GitPython: Denial of Service via regular expression backtracking in date parsing     (CVE-2026-110856)
    * python3.12-gitpython: GitPython: Arbitrary code execution via unsafe URL protocol handling     (CVE-2026-110857)
    * python3.12-gitpython: GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() Refspec     (CVE-2026-110858)
    * python3.12-gitpython: GitPython: Arbitrary file read via argument injection in branch checkout     (CVE-2026-110859)
    * python3.12-gitpython: GitPython: arbitrary code execution via improper submodule path validation     (CVE-2026-114145)
    * openvox-agent: integer overflow issue in regular expression compiler (CVE-2026-110264)
    * openvox-agent: integer overflow issue in CI/CD regular expression compiler (CVE-2026-97229)
    * openvox-agent: integer overflow issue in regular expression compiler (CVE-2026-93577)
    * openvox-agent: double free issue in regular expression parser (CVE-2026-89078)
    * openvox-server: jackson-dataformat-smile: Denial of Service via unbounded memory allocation in     asynchronous parser (CVE-2026-104895)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
476842	SCA: security update for Pillow (GHSA-g7cr-3p24-7wf7)	Tenable Self-Hosted Container Security	SCA Checks	2026/10/22	2026/10/28	high
476842	SCA: security update for Pillow (GHSA-g7cr-3p24-7wf7)	Tenable Cloud Security	SCA Checks	2026/10/22	2026/10/28	high
370275	Linux Distros 未修补的漏洞：CVE-2026-96778	Nessus	Misc.	2026/10/22	2026/11/5	high
374295	RHEL 9：衛星 6.19 （RHSA-2026:92861）	Nessus	Red Hat Local Security Checks	2026/10/30	2026/11/2	critical
370275	Linux Distros 未修補弱點：CVE-2026-96778	Nessus	Misc.	2026/10/22	2026/11/5	high
374295	RHEL 9：Satellite 6.19 （RHSA-2026:92861）	Nessus	Red Hat Local Security Checks	2026/10/30	2026/11/2	critical
370275	Linux Distros のパッチ未適用の脆弱性: CVE-2026-96778	Nessus	Misc.	2026/10/22	2026/11/5	high
373482	FreeBSD:Pillow -- 複数の脆弱性(b9a3fd21-d2af-11f1-bae2-3497f65b111b)	Nessus	FreeBSD Local Security Checks	2026/10/29	2026/10/29	critical
374295	RHEL 9:Satellite 6.19 (RHSA-2026:92861)	Nessus	Red Hat Local Security Checks	2026/10/30	2026/11/2	critical
376901	RHEL 8 / 9 : Satellite 6.16 EUS (RHSA-2026:95655)	Nessus	Red Hat Local Security Checks	2026/11/6	2026/11/9	critical
370275	Linux Distros Unpatched Vulnerability : CVE-2026-96778	Nessus	Misc.	2026/10/22	2026/11/5	high
373482	FreeBSD : Pillow -- multiple vulnerabilities (b9a3fd21-d2af-11f1-bae2-3497f65b111b)	Nessus	FreeBSD Local Security Checks	2026/10/29	2026/10/29	critical
376943	RHEL 9 : Satellite 6.17 (RHSA-2026:95656)	Nessus	Red Hat Local Security Checks	2026/11/6	2026/11/9	critical
377950	Amazon Linux 2023 : python3-pillow, python3-pillow-devel, python3-pillow-tk (ALAS2023-2026-3411)	Nessus	Amazon Linux Local Security Checks	2026/11/9	2026/11/9	critical
374295	RHEL 9 : Satellite 6.19 (RHSA-2026:92861)	Nessus	Red Hat Local Security Checks	2026/10/30	2026/11/2	critical
376918	RHEL 9 : Satellite 6.18 (RHSA-2026:95657)	Nessus	Red Hat Local Security Checks	2026/11/6	2026/11/9	critical

检测

插件搜索

high

high

high

critical

high

critical

high

critical

critical

critical

high

critical

critical

critical

critical

critical