Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: Tracing: Ensure visibility when inserting an element into tracingmap. Running the following two commands in parallel on a multi-processor AArch64 machine may occasionally generate an unexpected warning regarding duplicate...

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.20.1, a global-buffer-overflow issue was observed during FreeRDP’s Base64 decoding process. The root cause appears to be implementation-defined char signedness: on Arm/AArch64 builds, plain char values are treated...

Astra Linux – Vulnerability in Qemu

A out-of-bounds heap buffer access issue was identified in the ARM Generic Interrupt Controller emulator of QEMU, as of and including qemu 4.2.0 on the aarch64 platform. The issue arises because, when writing an interrupt ID to the controller’s memory area, it is not masked to be 4 bits wide. Thi...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: bonding: Fixed a NULL dereference of the struct bonding.rrtxcounter member. This issue occurs because if a bond is created with an initial mode != zero Round Robin, the memory required for the counter is never allocated. When...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: bpf, testrun: Fixed an alignment issue in bpfprogtestrunskb. We encountered a syzkaller issue due to an alignment fault for aarch64 architectures when KFENCE is enabled. When the size provided by the user’s bpf program is an o...

redis security, bug fix, and enhancement update

6.2.24-1 - rebase to 6.2.24 for CVE-2026-66373 6.2.22-2 - change pagefile size for aarch64 and ppcle64...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: dotnet10.0: aspnetcore-runtime-10.0-10.0.12-1.hum1 aarch64, x8664 aspnetcore-runtime-dbg-10.0-10.0.12-1.hum1 aarch64, x8664 aspnetcore-targeting-pack-10.0-10.0.12-1.hum1 aarch64, x8664...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: tar: tar-1.35-10.hum1 aarch64, x8664 tar-1.35-10.hum1.src src...

redis:7 security update

7.2.16-1.0.1 - Build with 64k pages to support redis on UEK on aarch64 7.2.16-1 - rebase to 7.2.16 for CVE-2026-66373 and backport CVE-2026-72568...

Oracle Linux 9 : ELSA-2026-65120-0: / redis:7 (ELSA-2026-651200)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-651200 advisory. 7.2.16-1.0.1 - Build with 64k pages to support redis on UEK on aarch64 7.2.16-1 - rebase to 7.2.16 for CVE-2026-66373 and backport CVE-2026-72568...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: rust: cargo-1.98.0-1.hum1 aarch64, x8664 clippy-1.98.0-1.hum1 aarch64, x8664 rust-1.98.0-1.hum1 aarch64, x8664 rust-analyzer-1.98.0-1.hum1 aarch64, x8664 rust-debugger-common-1.98.0-1.hum1 noarch...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: memcached: memcached-1.6.45-1.hum1 aarch64, x8664 memcached-devel-1.6.45-1.hum1 aarch64, x8664 memcached-selinux-1.6.45-1.hum1 noarch memcached-1.6.45-1.hum1.src src...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libevent: libevent-2.1.12-19.1.hum1 aarch64, x8664 libevent-devel-2.1.12-19.1.hum1 aarch64, x8664 libevent-doc-2.1.12-19.1.hum1 noarch libevent-2.1.12-19.1.hum1.src src Security Fixes: libevent:...

Security Bulletin: IBM Edge Data Collector uses cmov-0.5.3.crate which is vulnerable to CVE-2026-50185.

Summary IBM Edge Data Collector uses cmov-0.5.3.crate which is vulnerable to CVE-2026-50185. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-50185 DESCRIPTION: RustCrypto CMOV provides conditional move CPU intrinsics which are guaranteed on...

CVE-2026-50185

A flaw was found in the cmov component of RustCrypto. The aarch64 implementations of Cmov and CmovEq incorrectly assume that high bits are zero-extended when loading values smaller than a register. This can lead to incorrect output when certain high bits are set in a Cmov selector or in the u16 a...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ASoC: Codecs: va-macro: Fix for accessing an array out of bounds for an enum type. Accessing enums using integers would result in accessing an array out of bounds on platforms like aarch64, where sizeoflong is 8 compared to the...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rx-macro: fixed an issue where accessing an array was done outside the bounds of the array for an enum type. Accessing enums using integers would result in accessing an array outside its bounds on platforms like...

JLSEC-2026-1360 Wasmtime: Miscompiled guest heap access enables sandbox escape on aarch64 Cranelift

Impact Wasmtime's Cranelift compilation backend contains a bug on aarch64 when performing a certain shape of heap accesses which means that the wrong address is accessed. When combined with explicit bounds checks a guest WebAssembly module this can create a situation where there are two diverging...

JLSEC-2026-1361 Wasmtime with Winch compiler backend on aarch64 may allow a sandbox-escaping memory access

Impact Wasmtime with its Winch baseline non-default compiler backend may allow properly constructed guest Wasm to access host memory outside of its linear-memory sandbox. This vulnerability requires use of the Winch compiler -Ccompiler=winch. By default, Wasmtime uses its Cranelift backend, not...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: postgresql17: postgresql17-17.11-1.hum1 aarch64, x8664 postgresql17-contrib-17.11-1.hum1 aarch64, x8664 postgresql17-docs-17.11-1.hum1 aarch64, x8664 postgresql17-plperl-17.11-1.hum1 aarch64, x86...