Astra Linux – Vulnerability in Chromium

The use of after free in Passwords in Google Chrome before version 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox through UI interactions, using social engineering techniques. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

The use of after free in Web Authentication in Google Chrome before version 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Missing authorization in the Browser of Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Uninitialized use of Skia in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

The use of uninitialized variables in Skia in Google Chrome prior to version 151.0.7922.72 allowed a remote attacker to leak cross-origin data through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

The use of uninitialized variables in Skia in Google Chrome prior to version 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to leak cross-origin data through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: crypto: qce – fixed the error path in devmqceregisteralgs. If ops-registeralgs fails, the error path repeatedly calls ops-unregisteralgs, which originates from the failed registration process. Instead, use the loop index to...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: The shared page is not zeroed before being exposed to user space. The bnxtreallocucontext function allocates uctx-shpg using getfreepageGFPKERNEL. The buddy allocator does not zero pages without the GFPZERO parameter...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/sched: schhfsc: Do not make a class passive twice The updatevf function is called from two places for the same class during a single dequeue when the class’s child qdisc e.g., codel/fqcodel drops its last packets while...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Do not queue completed sysfs fallback requests. The fwloadsysfsfallback function calls deviceadd before adding fwpriv to pendingfwhead. deviceadd publishes the fallback loading interface; therefore, a userspace...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: jfs: Added a check for “read-only” mode before truncating a file in jfstruncatenolock. A check for the “read-only” mode was added to the jfstruncatenolock function to avoid errors when writing to a read-only filesystem. Call stac...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fixed kernel address leaks in the LBR stack. Before Arch LBR gained CPL filtering support, a user-only branch stack could still contain kernel addresses. As a result, kernel branch records might be exposed to user...

Astra Linux – Vulnerability in Chromium

The use of “after free” in Web Authentication in Google Chrome before version 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

In Google Chrome, policy bypass in MHTML before version 151.0.7922.72 allowed a remote attacker to leak cross-origin data through a crafted MHTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted inputs in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perform privilege escalation via a crafted Chrome Extension. Chromium security severity: Medium...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: afunix: Fixed a data race in unixdgrampeerwakeme. unixdgrampoll calls unixdgrampeerwakeme without ensuring that the other lock is held, and without checking whether its receive queue is full. In this case, we need to use...

Astra Linux – Vulnerability in GhostScript

Ghostscript GhostPDL 9.50 through 9.53.3 has a use-after-free in the sampleddatasample function called from sampleddatacontinue and interp...

Astra Linux – Vulnerability in WebKit2GTK

A buffer overflow issue has been addressed through improved memory handling. This issue is fixed in Safari 16, iOS 16, iOS 15.7, and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code execution...