137130 matches found
Astra Linux – Vulnerability in WebKit2GTK
A logic issue has been resolved through improved restrictions. This issue is fixed in tvOS 14.6, iOS 14.6, iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, and watchOS 7.5. A malicious website may be able to access restricted ports on arbitrary servers...
Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ext4: Silence the warning when evicting an inode with dioreadnolock When evicting an inode with the default dioreadnolock setting, it may cause problems because the unwritten extents are converted by the kworker after writeback,...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: arm64: Restrict CPUBIGENDIAN to GNU as or LLVM IAS 15.x or newer Prior to LLVM 15.0.0, LLVM’s integrated assembler would incorrectly byte-swap NOPs when compiling for big-endian, and the resulting sequence of bytes happened to...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fixed a memory leak in kfdmemdmamapuserptr. If the number of pages from the userptr BO differs from the SG BO, then the allocated memory for the SG table does not get freed before returning – this may lead to a memory...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fixed a page fault in ivpubounbindallbosfromcontext...
Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: i2c: piix4: Fix the issue where the adapter is not removed in piix4remove. In piix4probe, the piix4 adapter will be registered using piix4probe. This involves calling piix4addadapterssb800 or piix4addadapter. Both functions are...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ext4: Update sjournalinum if it changes after journal replay. When mounting a custom-extracted ext4 image, sjournalinum may change after journal replay. This is clearly unreasonable, as we have successfully loaded and replayed th...
CLSA-2026-1789387099 TuxCare security update for io.netty (9 CVEs)
TuxCare rebuilt 47 io.netty packages to address 9 CVEs. Fixed in 4.1.93.Final-tuxcare.4...
CLSA-2026-1789384929 TuxCare security update for cakephp/cakephp (1 CVE)
TuxCare rebuilt cakephp/cakephp to address 1 CVE. Fixed in 2.10.24-p3+tuxcare...
CLSA-2026-1789383190 TuxCare security update for org.apache.httpcomponents.core5 (2 CVEs)
TuxCare rebuilt 5 org.apache.httpcomponents.core5 packages to address 2 CVEs. Fixed in 5.1.5-tuxcare.1...
CLSA-2026-1789381947 TuxCare security update for numpy (2 CVEs)
TuxCare rebuilt numpy to address 2 CVEs. Fixed in 1.16.0.post3+tuxcare...
CLSA-2026-1789379973 TuxCare security update for setuptools (1 CVE)
TuxCare rebuilt setuptools to address 1 CVE. Fixed in 60.0.0.post2+tuxcare...
CLSA-2026-1789379698 TuxCare security update for aiohttp (1 CVE)
TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.4.post9+tuxcare...
CLSA-2026-1789379188 TuxCare security update for org.apache.httpcomponents (1 CVE)
TuxCare rebuilt 4 org.apache.httpcomponents packages to address 1 CVE. Fixed in 4.0.1-tuxcare.1...
CLSA-2026-1789377744 TuxCare security update for cryptography (1 CVE)
TuxCare rebuilt cryptography to address 1 CVE. Fixed in 42.0.8.post3+tuxcare...
CLSA-2026-1789377631 TuxCare security update for cryptography (1 CVE)
TuxCare rebuilt cryptography to address 1 CVE. Fixed in 43.0.1.post2+tuxcare...
CLSA-2026-1789376980 TuxCare security update for 13 packages (1 CVE)
TuxCare rebuilt 13 packages to address 1 CVE. Fixed in 6.0.17.Final-tuxcare.1...
Important: Red Hat Security Advisory: RHEL AI 3.3 RPM runtime CVE fix - ffmpeg
AIPCC Security Alerts identified CVEs in the 3.5 release of base-images. The CVEs are listed with a severity level of "Important" or higher. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application platform...