reternal-quickstart

RE:TERNAL Note: Still under development, only use for testing and do not expose interfaces! Current compose doesn't work yet, only try when you know what you're doing RE:TERNAL is a centralised purple team orchestration service to manage third-party C2 frameworks. Agents are installed on endpoint...

Fedora 45 : dovecot (2026-8b8efbd2b8)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-8b8efbd2b8 advisory. - updated to 2.4.5, many security fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

ingress-nginx

Прекращение поддержки Ingress NGINX Завершение Что вам нужно знать о прекращении поддержки Ingress NGINX: Поддержка на условиях «best-effort» будет продолжаться до марта 2026 года. После этого не будет новых релизов, исправлений ошибок и обновлений для устранения возможных уязвимостей безопасност...

Important: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.30.1 Release.

Red Hat OpenShift Dev Spaces 3.30.1 has been released. The 3.30.1 release fixes the regression CRW-13015 Get Started / sample cards on the dashboard are empty after upgrade to 3.30. This release provides additional CVE fixes and container dependency updates to Dev Spaces 3.30. Red Hat OpenShift D...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.3.3 (ROCm 6.4)

Red Hat AI Base Images 3.3.3 ROCm 6.4 is now available. Red Hat® AI Base Images...

ROOT-OS-ALPINE-321-CVE-2026-5773 CVE-2026-5773 in curl - Patched by Root

Root has patched CVE-2026-5773 in the curl package for Root:Alpine:3.21. Multiple fixed versions available...

ROOT-OS-ALPINE-322-CVE-2026-6276 CVE-2026-6276 in curl - Patched by Root

Root has patched CVE-2026-6276 in the curl package for Root:Alpine:3.22. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-49980 CVE-2026-49980 in github.com/rclone/rclone - Patched by Root

Root has patched CVE-2026-49980 in the github.com/rclone/rclone package for Root:Go. Multiple fixed versions available...

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.17.2 security update

Red Hat Advanced Cluster Management for Kubernetes v2.17 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS...

ROOT-OS-ALPINE-317-CVE-2026-28389 CVE-2026-28389 in openssl - Patched by Root

Root has patched CVE-2026-28389 in the openssl package for Root:Alpine:3.17. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-3479 CVE-2026-3479 in python3.13 - Patched by Root

Root has patched CVE-2026-3479 in the python3.13 package for Root:Debian:13. Multiple fixed versions available...

CLSA-2026-1789400252 TuxCare security update for org.springframework.ldap:spring-ldap-core (1 CVE)

TuxCare rebuilt org.springframework.ldap:spring-ldap-core to address 1 CVE. Fixed in 2.3.3.RELEASE-tuxcare.1...

ROOT-APP-NPM-GHSA-RP42-5VXX-QPWR GHSA-rp42-5vxx-qpwr in basic-ftp - Patched by Root

Root has patched GHSA-rp42-5vxx-qpwr in the basic-ftp package for Root:npm. Multiple fixed versions available...

ROOT-APP-PYPI-GHSA-78CV-MQJ4-43F7 GHSA-78cv-mqj4-43f7 in tornado - Patched by Root

Root has patched GHSA-78cv-mqj4-43f7 in the tornado package for Root:PyPI. Multiple fixed versions available...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip finding free audio for unknown engineid REASON ENGINEIDUNKNOWN equals -1, and cannot be used as an array index. Additionally, it indicates that the memory is uninitialized and does not require free audio...

Astra Linux – Vulnerability in WebKit2GTK

The issue was addressed through improved checks. This issue is fixed in Safari 17.6, iOS 17.6, iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, and watchOS 10.6. Processing maliciously crafted web content may lead to an unexpected process crash...

Astra Linux – Vulnerability in Consul

HashiCorp Consul and Consul Enterprise 1.10.1: The TXN.Apply endpoint allows for the registration of proxies for other services, enabling access to service traffic. This feature was fixed in versions 1.8.15, 1.9.9, and 1.10.2...

Astra Linux – Vulnerability in Ruby-Rack

Rack is a modular Ruby web server interface. Carefully crafted headers may cause header parsing in Rack to take longer than expected, potentially leading to a denial-of-service issue. The Accept and Forwarded headers are affected. Ruby 3.2 includes fixes for this problem, so Rack applications tha...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Drop the channel lock before queuing buffers. Ensure that read and write locks for the channel are not acquired consecutively by dropping the read lock from parsexferevent. This allows a callback provided to the...

Astra Linux – Vulnerability in WebKit2GTK

A logic issue has been resolved through improved state management. This issue is fixed in Safari 17.4, iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, and watchOS 10.4. Processing maliciously crafted web content may prevent the Content Security...