Astra Linux – Vulnerability in Vim

Out-of-bounds read in Vim prior to version 8.2...

Astra Linux – Vulnerability in Vim

Use of out-of-range pointer offset in the GitHub repository vim/vim before version 8.2.4418...

Astra Linux – Vulnerability in Chromium

Integer overflow in Skia in Google Chrome prior to version 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Vim

Vim is vulnerable to Out-of-bounds Read attacks...

Astra Linux – Vulnerability in Vim

Heap-based Buffer Overflow in the GitHub repository for vim/vim before version 9.0.0044...

Astra Linux – Vulnerability in Firefox and Thunderbird

Mozilla developers Andrew McCreight and Gabriele Svelto reported memory safety bugs present in Thunderbird 102.4. Some of these bugs showed signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This...

perl: Perl: Incorrect regular expression processing via large regular expressions

A flaw was found in Perl. When the Perl regular expression engine processes patterns with a very large number of alternative fixed strings, an internal data field can overflow. This leads to silently incorrect regular expression matches, causing the engine to either match strings it should not...

python-tornado security update

6.5.8-0.1 - Update to 6.5.8 Resolves: RHEL-247281...

CVE-2026-90783

MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic. Attackers can craft a malicious AVI file with oversized entry counts that cause an undersized heap allocation, allowing a heap buffer...

GHSA-6W3J-5FW6-R9VR vulnerabilities

Vulnerabilities for packages: thingsboard, opensearch-dashboards...

CVE-2026-84367 vulnerabilities

Vulnerabilities for packages: thingsboard, opensearch-dashboards...

CVE-2026-84364 vulnerabilities

Vulnerabilities for packages: kibana, librechat, commercial-gitlab-rails-ee, wazuh-dashboard-fips, wazuh-dashboard, commercial-gitlab-rails-ee-fips...

GHSA-G6GW-C38X-MQFC vulnerabilities

Vulnerabilities for packages: kibana, librechat, commercial-gitlab-rails-ee, wazuh-dashboard-fips, wazuh-dashboard, commercial-gitlab-rails-ee-fips...

CVE-2026-13346 affecting package python-pip for versions less than 24.2-10

CVE-2026-13346 affecting package python-pip for versions less than 24.2-10. A patched version of the package is available...

CVE-2026-56390 affecting package bison for versions less than 3.8.2-2

CVE-2026-56390 affecting package bison for versions less than 3.8.2-2. A patched version of the package is available...

CVE-2026-73281 affecting package openssh for versions less than 9.8p1-10

CVE-2026-73281 affecting package openssh for versions less than 9.8p1-10. A patched version of the package is available...

CVE-2026-63073 affecting package openssl for versions less than 3.3.7-6

CVE-2026-63073 affecting package openssl for versions less than 3.3.7-6. A patched version of the package is available...

CVE-2026-73283 affecting package openssh for versions less than 9.8p1-10

CVE-2026-73283 affecting package openssh for versions less than 9.8p1-10. A patched version of the package is available...

[SECURITY] Fedora 45 Update: dokuwiki-20260714c-1.fc45

DokuWiki is a standards compliant, simple to use Wiki, mainly aimed at creati ng documentation of any kind. It has a simple but powerful syntax which makes su re the data-files remain readable outside the Wiki and eases the creation of structured texts. All data is stored in plain text files no...

CVE-2026-89147

Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in the SMUX module where smuxaccept performs an unauthenticated blocking read without timeout on newly accepted connections. An unauthenticated remote client can connect to the SMUX listener and send no data, causing the...