ROOT-APP-MAVEN-CVE-2020-36179 CVE-2020-36179 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2020-36179 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2018-14718 CVE-2018-14718 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2018-14718 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2019-14540 CVE-2019-14540 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2019-14540 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2020-36189 CVE-2020-36189 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2020-36189 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2018-14719 CVE-2018-14719 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2018-14719 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2020-8840 CVE-2020-8840 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2020-8840 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2019-16942 CVE-2019-16942 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2019-16942 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2020-10673 CVE-2020-10673 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2020-10673 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-NUGET-CVE-2026-50525 CVE-2026-50525 in System.Security.Cryptography.Xml - Patched by Root

Root has patched CVE-2026-50525 in the System.Security.Cryptography.Xml package for Root:NuGet. Multiple fixed versions available...

ROOT-APP-NUGET-CVE-2026-47302 CVE-2026-47302 in System.Security.Cryptography.Xml - Patched by Root

Root has patched CVE-2026-47302 in the System.Security.Cryptography.Xml package for Root:NuGet. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-32874 CVE-2026-32874 in ujson - Patched by Root

Root has patched CVE-2026-32874 in the ujson package for Root:PyPI. Multiple fixed versions available...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: soc: ti: pm33xx: The refcount leak in am33xxpmprobe has been fixed. wkupm3ipcget takes a reference count, which should be released by wkupm3ipcput. Add the necessary refcount release in the error-prone paths...

Astra Linux – Vulnerability in Redis

Redis is an open-source, in-memory database that persists data on disk. When parsing an incoming Redis Standard Protocol RESP request, Redis allocates memory according to values specified by the user, which determine the number of elements in the multi-bulk header and the size of each element in...

Astra Linux – Vulnerability in Firefox

Memory safety bugs exist in Firefox 150.0.1. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability has been fixed in Firefox 150.0.2 and Thunderbird 150.0.2...

Astra Linux – Vulnerability in Redis

Redis is an open-source, in-memory database that persists data on disk. A user with sufficient privileges can create a malformed ACL selector, which, when accessed, triggers a server panic and subsequent denial of service. This issue has been fixed in Redis 7.2.7 and 7.4.2...

Astra Linux – Vulnerability in Twisted

Twisted is an event-based framework for internet applications, compatible with Python 3.6+. The HTTP 1.0 and 1.1 server provided by twisted.web could process pipelined HTTP requests out-of-order, potentially leading to information disclosure. This vulnerability has been fixed in 24.7.0rc1...

Astra Linux – Vulnerability in Firefox and Thunderbird

Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

Astra Linux – Vulnerability in cups

OpenPrinting CUPS is an open-source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.17, a network-attached attacker could send a crafted SNMP response to the CUPS SNMP backend, causing an out-of-bounds read of up to 176 bytes beyond the stack buffer. The leak...

Astra Linux – Vulnerability in Firefox, Thunderbird

Mitigation bypass in the Networking: HTTP component. This vulnerability has been fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

Astra Linux – Vulnerability in Firefox and Thunderbird

Memory safety bugs exist in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1, and Thunderbird 149.0.1. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This...