Astra Linux – Vulnerability in exiv2

Exiv2 is a C++ library and a command-line utility for reading, writing, deleting, and modifying image metadata in formats such as Exif, IPTC, XMP, and ICC. Prior to version 0.28.8, a buffer overflow vulnerability was discovered in Exiv2. The vulnerability lies in the preview component, which only...

Astra Linux – Vulnerability in golang-go.crypto

The x/crypto/ssh package in version 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to cause a panic in an SSH server...

Astra Linux – Vulnerability in libpcap

The sf-pcapng.c file in libpcap before version 1.9.1 does not properly validate the PHB header length before allocating memory...

Astra Linux – Vulnerability in Heimdal

Heimdal is an implementation of ASN.1/DER, PKIX, and Kerberos. Versions prior to 7.7.1 are vulnerable to a denial-of-service vulnerability in Heimdal’s PKI certificate validation library. This vulnerability affects the KDC via PKINIT and kinit via PKINIT, as well as any third-party applications...

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.0, there was an integer underflow issue in the updatereadcachebitmaporder function of FreeRDP’s core library. This vulnerability has been fixed in version 3.24.0...

Astra Linux – Vulnerability in golang-github-golang-jwt-jwt

golang-jwt is a Go implementation of JSON Web Tokens. Starting from version 3.2.0 and before versions 5.2.2 and 4.5.2, the parse.ParseUnverified function splits its argument which is untrusted data using periods. As a result, in the case of a malicious request where the Authorization header...

CLSA-2026-1791200036 TuxCare security update for image-size (2 CVEs)

TuxCare rebuilt image-size to address 2 CVEs. Fixed in 1.2.1-tuxcare.1...

CLSA-2026-1791199971 TuxCare security update for image-size (2 CVEs)

TuxCare rebuilt image-size to address 2 CVEs. Fixed in 0.5.5-tuxcare.1...

CLSA-2026-1791199964 TuxCare security update for file-type (1 CVE)

TuxCare rebuilt file-type to address 1 CVE. Fixed in 16.5.4-tuxcare.1...

CLSA-2026-1791199466 TuxCare security update for browserslist (2 CVEs)

TuxCare rebuilt browserslist to address 2 CVEs. Fixed in 4.21.5-tuxcare.1...

CLSA-2026-1791199397 TuxCare security update for browserslist (1 CVE)

TuxCare rebuilt browserslist to address 1 CVE. Fixed in 4.24.4-tuxcare.2...

UBUNTU-CVE-2026-59788

The email media type OAuth form passes the Authorization endpoint value to window.open without validating the URL scheme, so a javascript: URL is executed in the browser. This means a crafted media type configuration, deliverable as an import file, runs arbitrary JavaScript as the Super Admin who...

CLSA-2026-1791198699 TuxCare security update for baseline-browser-mapping (1 CVE)

TuxCare rebuilt baseline-browser-mapping to address 1 CVE. Fixed in 2.10.0-tuxcare.2...

ROOT-APP-NPM-CVE-2026-16729 CVE-2026-16729 in undici - Patched by Root

Root has patched CVE-2026-16729 in the undici package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-16728 CVE-2026-16728 in undici - Patched by Root

Root has patched CVE-2026-16728 in the undici package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-15157 CVE-2026-15157 in undici - Patched by Root

Root has patched CVE-2026-15157 in the undici package for Root:npm. Multiple fixed versions available...

USN-8865-1 edk2 vulnerabilities

It was discovered that EDK II incorrectly handled CMS key unwrapping in the embedded OpenSSL library. An attacker could possibly use this issue to cause a heap buffer overflow, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu...

USN-8865-1: EDK II vulnerabilities

It was discovered that EDK II incorrectly handled CMS key unwrapping in the embedded OpenSSL library. An attacker could possibly use this issue to cause a heap buffer overflow, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu...

ROOT-APP-MAVEN-CVE-2026-49485 CVE-2026-49485 in ca.uhn.hapi.fhir:org.hl7.fhir.validation - Patched by Root

Root has patched CVE-2026-49485 in the ca.uhn.hapi.fhir:org.hl7.fhir.validation package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2024-45294 CVE-2024-45294 in ca.uhn.hapi.fhir:org.hl7.fhir.utilities - Patched by Root

Root has patched CVE-2024-45294 in the ca.uhn.hapi.fhir:org.hl7.fhir.utilities package for Root:Maven. Multiple fixed versions available...