Astra Linux – Vulnerability in OpenVPN

OpenVPN versions 2.6.1 through 2.6.13 in server mode, using TLS-crypt-v2, allow remote attackers to trigger a denial of service by corrupting and replaying network packets during the early handshake phase...

Malicious code in slack-astra-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6761 Malicious code in slack-astra-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Astra Linux – Vulnerability in libavif

In libavif before version 1.3.0, the avifImageRGBToYUV function in reformat.c contains integer overflows during multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes...

Astra Linux – Vulnerability in libsoup3, libsoup2.4

A use-after-free vulnerability was discovered in libsoup, within the soupmessageheadersgetcontentdisposition function. This flaw allows a malicious HTTP client to cause memory corruption in the libsoup server...

Astra Linux – Vulnerability in Firefox

It was possible to interrupt the processing of a RegExp bailout and execute additional JavaScript code, potentially triggering garbage collection when the engine did not expect it. This vulnerability has been fixed in Firefox 136, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8...

Astra Linux – Vulnerability in Firefox

On 64-bit CPUs, when the JIT compiler compiles WASM i32 return values, it may pick up bits from remaining memory. This could potentially lead to these values being treated as a different type. This vulnerability has been fixed in Firefox 136, Firefox ESR 115.21, Firefox ESR 128.8, Thunderbird 136...

Astra Linux – Vulnerability in HAPProxy

The vulnerability in the src/cfgparse.c component of the HAProxy server software is related to pointer dereferencing errors. Exploiting this vulnerability allows an attacker to cause service failures...

Astra Linux – Vulnerability in Firefox

Memory safety bugs exist in Firefox 137 and Thunderbird 137. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability has been fixed in Firefox 138 and Thunderbird...

Astra Linux – Vulnerability in Firefox

Memory safety bugs exist in Firefox 135 and Thunderbird 135. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability has been fixed in Firefox 136 and Thunderbird...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fixed deadlocks related to PM in MS IOCTLs. Prevent runtime resume/suspend while MS IOCTLs are in progress. A failed suspend will invoke ivpumscleanup, which will attempt to acquire filepriv-mslock, a lock that is...

Astra Linux – Vulnerability in Intel-microcode, Linux-6.1, Linux-6.12

The exposure of sensitive information in shared microarchitectural structures during transient execution on some Intel processors may allow an authenticated user to potentially disclose information through local access...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: The issue of unexpectedly changing the path in ksmbdvfskernpathlocked has been fixed. When ksmbdvfskernpathlocked encounters an error, and it isn’t the last entry, it will exit without restoring the changed path buffer...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ipmi: ipmb: Added a check for the returned value of devmkasprintf. devmkasprintf may return a NULL pointer in case of failure, but this returned value is not checked...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: Wifi: ath12k – Buffer overflow in debugfs If the user attempts to write more than 32 bytes, it will result in memory corruption. Fortunately, since this issue occurs within debugfs, it only affects root users...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: crypto: tegra – Do not transfer requests when tegrainit fails The tegracmacinit or tegrashainit functions may return an error when memory is exhausted. In such cases, requests should not be transferred when an error occurs...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: HID: winwing: Added a NULL check in winwinginitled. The devmkasprintf function can return a NULL pointer if it fails, but this returned value is not checked in winwinginitled. A NULL check should be added in winwinginitled to...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: safesetid: Check the size of policy writes. syzbot attempts to write a buffer with a large size to a sysfs entry. The writing is handled by handlepolicyupdate, which triggers a warning in kmalloc. Check the size specified for the...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fixed a potential out-of-bounds issue related to read/write operations via C45 clause 45 of the mdiobus interface. When using publicly available tools like ‘mdio-tools’ to read/write data from/to network interfaces v...

Astra Linux – Vulnerability in Keepalived

The vulnerability of the parser.c component in the Keepalived network traffic balancing system is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to cause a service failure...