Astra Linux – vulnerability in libhttp-daemon-perl

HTTP::Daemon versions prior to 6.17 for Perl allow OS command injection via sendfile. sendfile opens its string argument using Perl’s two-argument open mechanism. The two-argument form interprets special prefixes: ‘| cmd’ and ‘cmd |’ open a pipe to a subprocess; ‘ path’ and ‘ path’ open the...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: restore write access before closing files opened by openexec bmregisterwrite opens an executable file using openexec, which internally calls doopenexecat and denies write access to the file to prevent modifications...

Astra Linux - vulnerability in requests

Requests is an HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function used a predictable filename when extracting files from zip archives into the system’s temporary directory. If the target file already existed, it was reused without any validation. A local...

Astra Linux – vulnerability in vim

Vim is an open source, command line text editor. Prior to version 9.1.2132, there was a heap buffer overflow vulnerability in Vim’s tag file resolution logic when processing the ‘helpfile’ option. The vulnerability resides in the gettagfname function within src/tag.c. When handling tags from help...

Astra Linux – vulnerability in libstb, libsixel

In Libsixel prior to and including v1.10.3, a NULL pointer dereference in the stbimage.h component of libsixel allows attackers to cause a denial of service DOS via a crafted PICT file...

Astra Linux – vulnerability in Firefox and Thunderbird

Mitigation bypass in the File Handling component. This vulnerability has been fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potential OOB in getfileallinfo for compound requests When a compound request consists of QUERYDIRECTORY + QUERYINFO FILEALLINFORMATION, and the first command consumes nearly the entire maxtranssize, getfileallinfo wou...

Astra Linux – vulnerability in Apache2

The Use After Free vulnerability in the modhttp2 module of the Apache HTTP Server occurs when file handles have already been exhausted. This issue affects Apache HTTP Server versions 2.4.55 through 2.4.67...

Astra Linux – vulnerability in docker.io-app, libpod

The tar extraction routines in moby/go-archive—including Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers—do not restrict filesystem operations to the destination directory. Instead, the extractor determines where each archive entry should be placed via lexical string...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: net: ipv6: flowlabel: defer exclusive option free until RCU teardown ip6flseqshow walks the global flowlabel hash under the seq-file RCU read-side lock and prints fl-opt-optnflen when an option block is present. Exclusive...

Astra Linux – vulnerability in Imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, an attacker who can connect to a magick-distribute-cache service could hijack a file descriptor in the server process when a race condition occurs. This issue h...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: smb: client: validate dacloffset before building DACL pointers parsesecdesc, buildsecdesc, and the chown path in idmodetocifsacl all add the server-supplied dacloffset to pntsd before verifying that a DACL header fits within the...

Astra Linux – vulnerability in GIMP

A flaw was found in GIMP’s PSP file format parser. A double-free condition occurs in the readlayerblock function when processing a specially crafted PSP file. This could allow an attacker to cause memory corruption, potentially leading to denial of service or arbitrary code execution...

Astra Linux – vulnerability in Samba

A flaw was found in Samba’s vfsworm module. This module is designed to provide write-once, read-many WORM protections by preventing file modifications after a configurable grace period. Due to insufficient validation during rename operations, an authenticated user with write access to a share cou...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate rec-used in journal-replay file record check checkfilerecord validates rec-total against the record size but never validates rec-used. The doaction journal-replay handlers read rec-used from disk and use it to...

Astra Linux – vulnerability in libxpm

A flaw was found in libXpm. A local user with low privileges could exploit an Out-of-Bounds Read vulnerability in the xpmNextWord function by processing a specially crafted or very small XPM X PixMap image file. This improper validation of file boundaries can cause an internal pointer to read...

Astra Linux – vulnerability in Imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-21 and 6.9.13-46, a malicious MIFF file could trigger an overflow when a user opens it in the display tool and right-clicks a tile to invoke the Load / Update menu item. This...

Astra Linux – vulnerability in linux-6.12, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to trigger foreground gc during f2fsmapblocks in lfs mode When using the “mode=lfs” mount option, generic/299 will cause a system panic as described below: ------------ cut here ------------ kernel BUG at...

Astra Linux – vulnerability in linux-6.12

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in durable v2 replay of active file handles parsedurablehandlecontext unconditionally assigns dhinfo-fp-conn to the current connection when handling a DURABLEREQV2 context with SMB2FLAGSREPLAYOPERATION...

Astra Linux – vulnerability in linux-6.12, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: gfs2: No more self recovery When a node withdraws and it turns out that it is the only node with the filesystem mounted, gfs2 currently tries to replay the local journal to restore the filesystem to a consistent state. This is no...