Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

A use-after-free flaw was discovered in the ext4remount function in the fs/ext4/super.c file within ext4 in the Linux kernel. This flaw allows a local user to cause an information leak issue when freeing the old quota file names before a potential failure, resulting in a use-after-free condition...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: net: fixed a refcount bug in skpsockget2. Syzkaller reported the refcount bug as follows: ------------ cut here ------------ refcountt: saturated; memory was leaking. WARNING: CPU: 1 PID: 3605 at lib/refcount.c:19...

Astra Linux – Vulnerability in Firefox

When styling and rendering an oversized element, Firefox did not apply correct clipping, allowing an attacker to paint over the user interface. This vulnerability affects Firefox versions prior to 89...

Astra Linux – Vulnerability in Linux, Linux 5.10

There is a bug in /net/nfc/netlink.c that allows an attacker to crash the Linux kernel by simulating an NFC device from user-space...

Astra Linux – Vulnerability in Firefox, Thunderbird

Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs in Firefox 102. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability affects Firefo...

Astra Linux – Vulnerability in Chromium

Before version 96.0.4664.93, using autofill in Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

A race condition was detected in the Linux kernel’s RxRPC network protocol, during the processing of RxRPC bundles. This issue arises due to the lack of proper locking when performing operations on an object. This could allow an attacker to escalate privileges and execute arbitrary code within th...

Astra Linux – Vulnerability in Chromium

Before version 123.0.6312.58, using Swiftshader in Google Chrome allowed a remote attacker to perform out-of-bounds memory access through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Insufficient data validation in Extensions in Google Chrome prior to 120.0.6099.216 allowed an attacker in a privileged network position to install a malicious extension via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mac80211: fixed the issue of locking in the ieee80211startap error path. We need to hold the local-mtx to release the channel context; this is even encoded in the lockdepassertheld function. Fix this issue...

Astra Linux – Vulnerability in SOX

In SoX 14.4.2, there is an assertion failure in rateinit in rate.c in libsox.a...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/rxe: Fixed the “kernel NULL pointer dereference” error. When the rxequeueinit function in the rxeqpinitreq function fails, both qp-req.task.func and qp-req.task.arg are not initialized. Due to the failure in creating the...

SUSE-SU-2026:4168-1 Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.72 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction bsc1275458. - CVE-2026-68138: net/sched: serialize qdiscrtablist...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: gcc13: gcc13-13.5.0-0.1.hum1 aarch64, x8664 gcc13-c++-13.5.0-0.1.hum1 aarch64, x8664 gcc13-gfortran-13.5.0-0.1.hum1 aarch64, x8664 gcc13-plugin-annobin-13.5.0-0.1.hum1 aarch64, x8664...

RHEL 9 : kernel (RHSA-2026:67150)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67150 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel: Denial of Servi...

openssl security, bug fix, and enhancement update

3.5.8-1.0.1 - Replace upstream references Orabug: 34340177 - Update FIPS provider name Orabug: 35824276 1:3.5.8-1 - Rebase to OpenSSL 3.5.8 Resolves: RHEL-242944 Resolves: RHEL-246254 Resolves: RHEL-246266 Resolves: RHEL-246306 Resolves: RHEL-246437 Resolves: RHEL-246441 Resolves: RHEL-246445...

openssl security, bug fix, and enhancement update

3.5.8-1.0.1 - Replace upstream references Orabug: 34340177 3.5.8.openela.0.1 - Add OpenELA specific changes 1:3.5.8-1 - Rebase to OpenSSL 3.5.8 Resolves: RHEL-242945 Resolves: RHEL-246260 Resolves: RHEL-246284 Resolves: RHEL-246319 Resolves: RHEL-246439 Resolves: RHEL-246443 Resolves: RHEL-246447...

Release Information for Veeam Backup for Microsoft 365 8.6

Requirements This release can be used to: upgrade an existing v8, v8.1, v8.2, v8.3, v8.4, or v8.5 deployment of Veeam Backup for Microsoft 365 to v8.6. install a new deployment of Veeam Backup for Microsoft 365 v8.6. After installing this release, the Veeam Backup for Microsoft 365 build number...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: dotnet10.0: aspnetcore-runtime-10.0-10.0.12-1.hum1 aarch64, x8664 aspnetcore-runtime-dbg-10.0-10.0.12-1.hum1 aarch64, x8664 aspnetcore-targeting-pack-10.0-10.0.12-1.hum1 aarch64, x8664...

Linux Distros Unpatched Vulnerability : CVE-2026-89755

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/migratedevice: clear stale mapping after freeing swapcache migratedevicepages reads the folio mapping before calling foliofreeswap. When foliofreeswap...