Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: pps: Fixed a use-after-free On a board running with ntpd and gpsd, I’m encountering a consistent use-after-free in sysexit from gpsd during reboots: pps pps1: Removed ----------- ------------ Cut here ----------- kobject: "null"...

Astra Linux – Vulnerability in Cpio

The vulnerability of the Cpio archiving utility is related to integer overflow. Exploiting this vulnerability allows an attacker to cause a service failure...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in BFCache in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially obtain user information via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Firefox

Previewing a response in Devtools ignored CSP headers, which could have allowed content injection attacks. This vulnerability was fixed in Firefox 139 and Thunderbird 139...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in the Background Fetch API in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to leak cross-origin data through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Firefox

Memory safety bugs exist in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability has be...

Astra Linux – Vulnerability in Firefox, Thunderbird

Due to insufficient escaping of the newline character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user’s system. This vulnerability was fixed in Firefox 139, Firefox ESR 115.24, Firefox ESR 128.11,...

Astra Linux – Vulnerability in Firefox

Memory safety bugs exist in Firefox 138 and Thunderbird 138. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability has been fixed in Firefox 139 and Thunderbird...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in the FileSystemAccess API in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Firefox

By first using the AI chatbot in one tab and then activating it in another tab, the document title from the previous tab would be leaked into the chat prompt. This vulnerability was fixed in Firefox 137...

Astra Linux – Vulnerability in Firefox

Memory safety bugs exist in Firefox 136 and Thunderbird 136. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability has been fixed in Firefox 137 and Thunderbird...

Astra Linux – Vulnerability in Firefox, Thunderbird

A clickjacking vulnerability could have been exploited to trick users into revealing their saved payment card details to a malicious page. This vulnerability has been fixed in Firefox 139, Firefox ESR 128.11, Thunderbird 139, and Thunderbird 128.11...

Astra Linux – Vulnerability in the 389-DS-base

A flaw was discovered in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended search request, resulting in a denial of service...

Astra Linux – Vulnerability in libpod

A flaw was discovered in Podman. In a Containerfile or Podman, data written during the podman build using RUN --mount=type=bind is not discarded. This issue can cause files created within the container to appear in the temporary build context directory on the host, making the created files...

Astra Linux – Vulnerability in GIMP

GIMP ICO File Parsing: Integer Overflow and Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability, as the target must visit a malicious page or open a...

Astra Linux – Vulnerability in usbutils

The vulnerability of the list.h component of the USButils utility is related to pointer dereferencing errors. Exploiting this vulnerability allows an attacker to cause a service failure...

Astra Linux – Vulnerability in Corosync

The vulnerability of the coroparse.c component of the Corosync cluster engine is related to the improper release of memory before deleting the last reference. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

Astra Linux – Vulnerability in Firefox

When Multi-Account Containers was enabled, DNS requests could bypass a SOCKS proxy when the domain name was invalid or the SOCKS proxy was not responding. This vulnerability was fixed in Firefox 140 and Thunderbird 140...

Astra Linux – Vulnerability in Chromium

The use of “after free” in Metrics in Google Chrome before version 137.0.7151.119 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Augeas

A vulnerability has been discovered in Hercules Augeas 1.14.1 and is classified as problematic. This vulnerability affects the recaseexpand function of the src/fa.c file. Manipulation of the re argument leads to a null pointer dereference. Local attacks are required to exploit this vulnerability...