Astra Linux – Vulnerability in imagemagick

In the IntensityCompare function within /MagickCore/quantize.c, a double value was being converted to an int and then returned. In some cases, this resulted in a value that was outside the range of the type int. This flaw could be triggered by a malicious input file under certain conditions when...

perl: Perl: Incorrect regular expression processing via large regular expressions

A flaw was found in Perl. When the Perl regular expression engine processes patterns with a very large number of alternative fixed strings, an internal data field can overflow. This leads to silently incorrect regular expression matches, causing the engine to either match strings it should not...

python-tornado security update

6.5.8-0.1 - Update to 6.5.8 Resolves: RHEL-247281...

CVE-2026-90783

MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic. Attackers can craft a malicious AVI file with oversized entry counts that cause an undersized heap allocation, allowing a heap buffer...

CVE-2026-84367 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-6W3J-5FW6-R9VR vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2026-84364 vulnerabilities

Vulnerabilities for packages: kibana, librechat, wazuh-dashboard, wazuh-dashboard-fips...

GHSA-G6GW-C38X-MQFC vulnerabilities

Vulnerabilities for packages: kibana, librechat, wazuh-dashboard, wazuh-dashboard-fips...

CVE-2026-73281 affecting package openssh for versions less than 9.8p1-10

CVE-2026-73281 affecting package openssh for versions less than 9.8p1-10. A patched version of the package is available...

CVE-2026-73283 affecting package openssh for versions less than 9.8p1-10

CVE-2026-73283 affecting package openssh for versions less than 9.8p1-10. A patched version of the package is available...

CVE-2026-13346 affecting package python-pip for versions less than 24.2-10

CVE-2026-13346 affecting package python-pip for versions less than 24.2-10. A patched version of the package is available...

CVE-2026-56390 affecting package bison for versions less than 3.8.2-2

CVE-2026-56390 affecting package bison for versions less than 3.8.2-2. A patched version of the package is available...

CVE-2026-63073 affecting package openssl for versions less than 3.3.7-6

CVE-2026-63073 affecting package openssl for versions less than 3.3.7-6. A patched version of the package is available...

CVE-2026-89147

Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in the SMUX module where smuxaccept performs an unauthenticated blocking read without timeout on newly accepted connections. An unauthenticated remote client can connect to the SMUX listener and send no data, causing the...

CVE-2026-70906 vulnerabilities

Vulnerabilities for packages: openjdk-jipher-fips...

CVE-2026-70907 vulnerabilities

Vulnerabilities for packages: liberica, openjdk-jipher-fips...

GHSA-763M-79HH-57F2 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-8CW4-87C7-C6XX vulnerabilities

Vulnerabilities for packages: langfuse-fips, langfuse...

GHSA-RGJ7-G3M4-5G8C vulnerabilities

Vulnerabilities for packages: tileserver-gl...

ROS-20260911-73-0209

The vulnerability of the Password component in Google Chrome and Microsoft Edge relates to improper authentication procedures. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...