CLEANSTART-2026-WQ77811 In Bouncy Castle for Java before 1

Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-PU24283 In Jakarta Mail versions prior to 2

Security vulnerability affects the sonarqube package. In Jakarta Mail versions prior to 2...

CLEANSTART-2026-RK76789 In Bouncy Castle for Java before 1

Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-MJ80474 client may issue specially crafted HTTP/1

Security vulnerability affects the trino package. A client may issue specially crafted HTTP/1...

CLEANSTART-2026-PB13489 gRPC-Go is the Go language implementation of gRPC

Security vulnerability affects the temporal-server package. gRPC-Go is the Go language implementation of gRPC...

CLEANSTART-2026-HI18999 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Security vulnerability affects the temporal-server package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...

CLEANSTART-2026-IT36341 On Linux, if the target of Root

Security vulnerability affects the temporal-server package. On Linux, if the target of Root...

CLEANSTART-2026-JZ54456 On Unix systems, opening a file in an os

Security vulnerability affects the temporal-server package. On Unix systems, opening a file in an os...

CLEANSTART-2026-LG62775 (*x509

Security vulnerability affects the temporal-server package. x509...

CLEANSTART-2026-MX93537 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Security vulnerability affects the grafana-alloy package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...

CLEANSTART-2026-GU78315 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Security vulnerability affects the grafana-alloy package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...

CVE-2024-27956

CVE-2024-27956 CVE-2024-27956...

Astra Linux – Vulnerability in Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Closures: Change BUGON to WARNON If a BUGON function is actually executed, it shouldn’t be considered a real BUG. For reference, this issue has occurred once during the continuous integration process. We will need more informatio...

Astra Linux – Vulnerability in Git

Gitk is a Tcl/Tk-based Git history browser. Starting with version 1.7.0, when a user clones an untrusted repository and runs Gitk without additional command arguments, files for which the user has write permission can be created and truncated. The option “Support per-file encoding” must have been...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel before version 6.6.7, a untrusted VMM could trigger the int80 syscall handling at any given point. This issue is related to the files arch/x86/coco/tdx/tdx.c and arch/x86/mm/memencryptamd.c...

Astra Linux – Vulnerability in Firefox, Thunderbird

The truncation of a long URL could have allowed for origin spoofing in a permission prompt. This vulnerability affects Firefox 132, Firefox ESR 128.4, Thunderbird 128.4, and Thunderbird 132...

Astra Linux – Vulnerability in Linux, Linux 5.10

A flaw in the processing of received ICMP errors such as ICMP fragments and ICMP redirections within the Linux kernel’s functionality was identified. This flaw allows an off-path remote user to quickly scan open UDP ports. This vulnerability enables a remote user to bypass the UDP source port...

Astra Linux – Vulnerability in Firefox and Thunderbird

When attempting to load a cross-origin resource in an audio/video context, a decoding error may occur. The details of that error may contain information related to the resource. This vulnerability affects Firefox versions earlier than 86, Thunderbird versions earlier than 78.8, and Firefox ESR...

Astra Linux – Vulnerability in xz-utils

XZ Utils provides a general-purpose data-compression library along with command-line tools. Prior to version 5.8.3, if the lzmaindexdecoder function was used to decode an Index that contained no Records, the resulting lzmaindex would be in a state where subsequent calls to lzmaindex.Append would...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in DevTools in Google Chrome prior to 143.0.7499.41 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension. Chromium security severity: High...