GPAC MP4Box security vulnerability

The GPAC MP4Box contains a security vulnerability. This vulnerability stems from a segmentation violation that occurs when the dumpisomsaps function /mp4box/filedump.c processes specially crafted MP4 files, potentially leading to a denial-of-service attack...

PT-2026-128451

In the Linux kernel, the following vulnerability has been resolved: net: gso: limit recursive IP-in-IP segmentation IP-in-IP GSO can re-enter inet gso segment or ipv6 gso segment for each nested IP header. encap level tracks header bytes, not callback depth, so a deep chain can exhaust the kernel...

OESA-2026-4254 perl-DBI security update

The DBI is the standard database interface module for Perl. It defines a set of methods, variables and conventions that provide a consistent database interface independent of the actual database being used. It is important to remember that the DBI is just an interface. The DBI is a layer of "glue...

OESA-2026-4253 perl-DBI security update

The DBI is the standard database interface module for Perl. It defines a set of methods, variables and conventions that provide a consistent database interface independent of the actual database being used. It is important to remember that the DBI is just an interface. The DBI is a layer of "glue...

OESA-2026-4252 perl-DBI security update

The DBI is the standard database interface module for Perl. It defines a set of methods, variables and conventions that provide a consistent database interface independent of the actual database being used. It is important to remember that the DBI is just an interface. The DBI is a layer of "glue...

OESA-2026-4251 perl-DBI security update

The DBI is the standard database interface module for Perl. It defines a set of methods, variables and conventions that provide a consistent database interface independent of the actual database being used. It is important to remember that the DBI is just an interface. The DBI is a layer of "glue...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: net: prevented skb corruption during frag list segmentation. Ian reported several instances of skb corruption triggered by rx-gro-list, resulting in similar errors: 62.624003 BUG: kernel NULL pointer dereference, address:...

Astra Linux – Vulnerability in cjson

It has been discovered that cJSON v1.7.17 contains a segmentation violation, which can occur through the second parameter of the cJSONSetValuestring function in the cJSON.c library...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: fix udp gsoskbSegment after pulling from fragList The commit a1e40ac5b5e9 “net: gso: fix udp gso fragList segmentation after pulling from fragList” detected invalid geometries in the fragList skbSegments and redirected them...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: skbuff: Account for tail adjustment during pull operations Extending the tail of a data structure may have some unexpected side effects if a program uses a helper function like BPFFUNCskbpulldata to read partial content beyond th...

Astra Linux – Vulnerability in cjson

It has been discovered that cJSON v1.7.16 contains a segmentation violation due to the use of the cJSONSetValuestring function in the cJSON.c file...

Astra Linux – Vulnerability in Mariadb 10.3

It was discovered that MariaDB versions 10.2 to 10.7 contain a segmentation fault due to the subselect component...

Astra Linux – vulnerability in mariadb-10.3

It has been discovered that MariaDB versions 10.2 through 10.7 contain a segmentation fault caused by the Itemfuncin::cleanup/Item::cleanupprocessor component...

Astra Linux – vulnerability in mariadb-10.3

It has been discovered that MariaDB versions 10.2 through 10.7 contain a segmentation fault caused by the Itemargs::walkargs component...

Astra Linux – Vulnerability in libxml2

A issue was discovered in libxml2 before version 2.10.3. When parsing a multi-gigabyte XML document with the XMLPARSEHUGE parser option enabled, several integer counters may overflow. This leads to an attempt to access an array at a negative 2GB offset, typically resulting in a segmentation fault...

Astra Linux – Vulnerability in advancecomp

Advancecomp v2.3 contains a segmentation fault...

Astra Linux – Vulnerability in netcdf

A issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmlcharcontent attempts to use realloc on a block that has not been allocated, resulting in an invalid free operation and a segmentation fault...

Astra Linux – Vulnerability in libde265

libde265 is an open-source implementation of the h.265 video codec. Prior to version 1.0.17, a malformed H.265 PPS NAL unit caused a segmentation fault in the picparameterset::setderivedvalues function. This issue has been fixed in version 1.0.17...

Astra Linux – vulnerability in linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data If the non-paged data of a SKB contains a protocol header and payload to be transmitted on a platform where the DMA AXI address width is set to 40-bit/48-bit, ...

Astra Linux – vulnerability in libmysofa

Improper handling of input data in the verifyAttribute function within the libmysofa library versions 0.5 through 1.1 can result in a NULL pointer dereference and segmentation fault, either due to strict memory protection or due to overwriting a near-NULL pointer when memory restrictions are abse...