9316 matches found
OESA-2026-3805 file-roller security update
File Roller is an archive manager that you can create and modify archives; view the content of an archive;view and modify a file contained in the archive; extract files from the archive. Security Fixes: A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive...
OESA-2026-3804 file-roller security update
File Roller is an archive manager that you can create and modify archives; view the content of an archive;view and modify a file contained in the archive; extract files from the archive. Security Fixes: A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive...
OESA-2026-3803 file-roller security update
File Roller is an archive manager that you can create and modify archives; view the content of an archive;view and modify a file contained in the archive; extract files from the archive. Security Fixes: A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive...
OESA-2026-3732 bluez security update
This package provides all utilities for use in Bluetooth applications. The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A. Security Fixes: A vulnerability, which was classified as very critical, was found in Linux BlueZ version now known.CWE is classifying the issue as CWE-121. A...
OESA-2026-3731 bluez security update
This package provides all utilities for use in Bluetooth applications. The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A. Security Fixes: A vulnerability, which was classified as very critical, was found in Linux BlueZ version now known.CWE is classifying the issue as CWE-121. A...
OESA-2026-3730 bluez security update
This package provides all utilities for use in Bluetooth applications. The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A. Security Fixes: A vulnerability, which was classified as very critical, was found in Linux BlueZ version now known.CWE is classifying the issue as CWE-121. A...
OESA-2026-3729 bluez security update
This package provides all utilities for use in Bluetooth applications. The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A. Security Fixes: A vulnerability, which was classified as very critical, was found in Linux BlueZ version now known.CWE is classifying the issue as CWE-121. A...
Astra Linux – Vulnerability in gst-plugins-base1.0
In GStreamer through 1.26.1, the subparse plugin’s parsesubriptime function may write data beyond the bounds of a stack buffer, resulting in a crash...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: cpufreq: qcom: fix writes in read-only memory region This commit fixes a kernel error caused by a write operation in read-only memory: 9.068287 Unable to handle kernel write to read-only memory at virtual address ffff800009240ad8...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: Wifi: brwimac: pcie: handling of randbuf allocation failure The kzalloc function in brwimacpciedownloadfwnvram will return null if physical memory runs out. As a result, if we use getrandombytes to generate random bytes into the...
Astra Linux – Vulnerability in vorbis-tools
A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package, within the remotethread function in remote.c. This vulnerability occurs during the remote control functionality, when processing malformed input, resulting in a stack buffer underflow...
Astra Linux – Vulnerability in Firefox and Thunderbird
In some cases, an untrusted input stream was copied to a stack buffer without checking its size. This resulted in a potentially exploitable crash, which could have led to a sandbox escape. This vulnerability affects Firefox 116, Firefox ESR 102.14, and Firefox ESR 115.1...
Astra Linux – Vulnerability in libde265
It was discovered that Libde265 v1.0.8 contains a stack-buffer-overflow vulnerability through the use of void putepelhvfallback in fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS attack using a specially crafted video file...
Astra Linux – Vulnerability in xorg-server
A stack-based buffer overflow vulnerability was discovered in the X.Org X server and Xwayland. A mismatch between the X server’s requirements and the maximum font name length supported by the libXfont2 library can lead to a stack buffer overflow during font alias resolution. The X server allocate...
Astra Linux – Vulnerability in xorg-server
A stack-based buffer overflow vulnerability was discovered in the X.Org X server and Xwayland. The X server has multiple stack buffers with a size of XkbMaxShiftLevel XkbNumKbdGroups, but the CheckKeyTypes function does not verify or limit non-canonical key types to XkbMaxShiftLevel. A client can...
Astra Linux – Vulnerability in faad2
A issue was discovered in faad2 through 2.10.0. A stack-buffer-overflow exists in the function ftypin located in mp4read.c. This allows an attacker to cause code execution...
Astra Linux – Vulnerability in xorg-server
A stack-based buffer overflow vulnerability was discovered in the X.Org X server and Xwayland. The XkbSetMapChecks function declares a fixed-size stack buffer, mapWidths256, indexed by key type index. The helper function CheckKeyTypes writes to this buffer at a position controlled by the client,...
Astra Linux – Vulnerability in gnutls28
A flaw was discovered in the GnuTLS library, specifically in the gnutlspkcs11tokeninit function, which handles PKCS11 token initialization. When a token label longer than expected is processed, the function writes beyond the end of a fixed-size stack buffer. This programming error can cause...
Astra Linux – Vulnerability in xorg-server, xwayland
A buffer overflow vulnerability was discovered in X.Org and Xwayland. The code in XkbVModMaskText allocates a fixed-sized buffer on the stack and copies the names of the virtual modifiers to that buffer. The code fails to check the bounds of the buffer and will copy the data regardless of the siz...