Astra Linux – Vulnerability in imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a logic error in the YUV sampling factor validation allowed an invalid sampling factor to bypass checks and trigger a division-by-zero during image loading,...

CVE-2026-66902

creationtimestamp| type| source ---|---|--- 2026-08-04 21:24:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/5jerlnuteddya 2026-08-05 20:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msedshg2v22h 2026-08-06 12:32:03+00:00| seen|...

CVE-2026-67551

creationtimestamp| type| source ---|---|--- 2026-08-04 19:48:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/6xhmka3yohgj5 2026-08-05 06:24:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5imjmiyodl5vq...

CVE-2026-66257

creationtimestamp| type| source ---|---|--- 2026-08-04 18:07:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/amyetcwzytgq5...

CVE-2026-18536

creationtimestamp| type| source ---|---|--- 2026-08-01 14:31:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3j3jbe6z3bfgg 2026-08-01 20:40:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2dcdmekf24 2026-08-01 20:40:58+00:00| seen|...

CVE-2026-62416

creationtimestamp| type| source ---|---|--- 2026-07-31 04:45:40+00:00| seen| https://jvn.jp/en/vu/JVNVU92540957 2026-08-03 10:10:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3myb6nvixzxk7...

JLSEC-2026-960 ImageMagick has Use After Free in MSLStartElement in "coders/msl.c"

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted MSL script triggers a heap-use-after-free. The operation element handler replaces and frees the image while the parser continues reading from it,...

Security update for helm

This update for helm fixes the following issues: Update to version 3.21.3. CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266598. CVE-2026-56852: golang.org/x/text/unicode/norm: handling input...

CVE-2026-63685

creationtimestamp| type| source ---|---|--- 2026-07-22 22:40:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrbfdnvrpm2a...

CVE-2026-61244

creationtimestamp| type| source ---|---|--- 2026-07-22 19:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrb3b6jauz2y 2026-07-23 18:18:29+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-16405

creationtimestamp| type| source ---|---|--- 2026-07-21 14:03:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5xyptwf52a 2026-07-22 04:47:46+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722...

CVE-2026-59236

creationtimestamp| type| source ---|---|--- 2026-07-15 13:40:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqotv6s2dw2n...

CVE-2026-15291

creationtimestamp| type| source ---|---|--- 2026-07-10 18:40:33+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcsdod5q62s 2026-07-12 19:01:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqhugxoekp2m...

CVE-2026-15330

creationtimestamp| type| source ---|---|--- 2026-07-10 09:57:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbv4pxta22y...

CVE-2026-59890

creationtimestamp| type| source ---|---|--- 2026-07-08 19:55:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5vm6vmlj2i 2026-07-21 20:35:09+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-h35f-9h28-mq5c 2026-07-22 12:00:52+00:00| seen|...

CVE-2026-59257

creationtimestamp| type| source ---|---|--- 2026-07-08 14:41:40+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mq5e2piu2p26 2026-07-08 15:57:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5ibtgihj2k...

CVE-2026-58298

creationtimestamp| type| source ---|---|--- 2026-07-04 02:40:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mprzvfubhq2e 2026-07-06 07:50:27+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706 2026-07-14 22:02:53+00:00| seen|...

CVE-2026-50229

creationtimestamp| type| source ---|---|--- 2026-06-29 21:40:40+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mphhbocbak2p 2026-06-29 22:19:25+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mphjgx4ff32q 2026-06-29 23:32:51+00:00| seen|...

CVE-2026-42012

creationtimestamp| type| source ---|---|--- 2026-06-29 11:40:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgfqrgxrk2t...

Astra Linux – Vulnerability in imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Before versions 7.1.2-15 and 6.9.13-40, when a PCD file did not contain a valid Sync marker, the DecodeImage function would get stuck in an infinite loop while searching for the Sync marker. This caused...