Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: netfilter: nftct: sanitize layer 3 and 4 protocol numbers in custom expectations - Disallow families other than NFPROTOIPV4,IPV6,INET. - Disallow layer 4 protocols without ports, as the destination port is a mandatory attribut...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: zero expects NAT fields when CTAEXPECTNAT absent ctnetlinkallocexpect allocates expectations from a non-zeroing slab cache via nfctexpectalloc. When CTAEXPECTNAT is not present in the netlink message,...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerabilities have been resolved: netfilter: nftct: Skip the evaluation of rules for confirmed conntrack entries. The nftctexpectobjeval function calls nfctextadd for confirmed conntrack entries. However, nfctextadd can only be called when !nfctisconfirmed is...

CVE-2026-80668

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackexpect: use conntrack GC to reap expectations This patch replaces the timer API by GC worker approach for expectations, as it already happened in many other subsystems. Use the existing conntrack GC worker t...

airflow-calendar (>=0.5.0, <=0.9.1), airflow-provider-great-expectations (1.0.0) +2 more potentially affected by CVE-2026-67587 via apache-airflow (>=3.3.0, <=3.3.1rc2)

apache-airflow PYPI version =3.3.0, =0.5.0, =1.3.0, =1.3.1rc2 Source cves: CVE-2026-67587 Source advisory: OSV:GHSA-2QJV-P2GC-MJG2...

airflow-calendar (>=0.5.0, <=0.9.1), airflow-provider-great-expectations (1.0.0) +2 more potentially affected by CVE-2026-67260 via apache-airflow (>=3.3.0, <=3.3.1rc2)

apache-airflow PYPI version =3.3.0, =0.5.0, =1.3.0, =1.3.1rc2 Source cves: CVE-2026-67260 Source advisory: GHSA-Q4C3-7575-55J2...

airflow-calendar (>=0.5.0, <=0.9.1), airflow-provider-great-expectations (1.0.0) +2 more potentially affected by CVE-2026-65017 via apache-airflow (>=3.3.0, <=3.3.1rc2)

apache-airflow PYPI version =3.3.0, =0.5.0, =1.3.0, =1.3.1rc2 Source cves: CVE-2026-65017 Source advisory: GHSA-C56V-8W4G-3MFM...

airflow-calendar (>=0.5.0, <=0.9.1), airflow-provider-great-expectations (1.0.0) +2 more potentially affected by CVE-2026-67260 via apache-airflow (>=3.3.0, <=3.3.1rc2)

apache-airflow PYPI version =3.3.0, =0.5.0, =1.3.0, =1.3.1rc2 Source cves: CVE-2026-67260 Source advisory: OSV:GHSA-Q4C3-7575-55J2...

airflow-calendar (>=0.5.0, <=0.9.1), airflow-provider-great-expectations (1.0.0) +2 more potentially affected by CVE-2026-67587 via apache-airflow (>=3.3.0, <=3.3.1rc2)

apache-airflow PYPI version =3.3.0, =0.5.0, =1.3.0, =1.3.1rc2 Source cves: CVE-2026-67587 Source advisory: GHSA-2QJV-P2GC-MJG2...

airflow-calendar (>=0.5.0, <=0.9.1), airflow-provider-great-expectations (1.0.0) +2 more potentially affected by CVE-2026-58076 via apache-airflow (>=3.3.0, <=3.3.1rc2)

apache-airflow PYPI version =3.3.0, =0.5.0, =1.3.0, =1.3.1rc2 Source cves: CVE-2026-58076 Source advisory: GHSA-8PRW-8M6X-8W6F...

airflow-calendar (>=0.5.0, <=0.9.1), airflow-provider-great-expectations (1.0.0) +2 more potentially affected by CVE-2026-65017 via apache-airflow-core (>=3.3.0, <=3.3.1rc2)

apache-airflow-core PYPI version =3.3.0, =0.5.0, =3.3.0, =1.3.0, =1.3.1rc2 Source cves: CVE-2026-65017 Source advisory: SNYK:PYTHON-APACHEAIRFLOWCORE-18748191...

airflow-calendar (>=0.5.0, <=0.9.1), airflow-provider-great-expectations (1.0.0) +2 more potentially affected by CVE-2026-67587 via apache-airflow (>=3.3.0, <=3.3.1rc2)

apache-airflow PYPI version =3.3.0, =0.5.0, =1.3.0, =1.3.1rc2 Source cves: CVE-2026-67587 Source advisory: OSV:PYSEC-2026-3708...

airflow-calendar (>=0.5.0, <=0.9.1), airflow-provider-great-expectations (1.0.0) +2 more potentially affected by CVE-2026-58076 +1 more via apache-airflow (>=3.3.0, <=3.3.1rc2)

apache-airflow PYPI version =3.3.0, =0.5.0, =1.3.0, =1.3.1rc2 Source cves: CVE-2026-58076, CVE-2026-67260 Source advisory: OSV:PYSEC-2026-3707...

airflow-calendar (>=0.5.0, <=0.9.1), airflow-provider-great-expectations (1.0.0) +2 more potentially affected by CVE-2026-58076 via apache-airflow (>=3.3.0, <=3.3.1rc2)

apache-airflow PYPI version =3.3.0, =0.5.0, =1.3.0, =1.3.1rc2 Source cves: CVE-2026-58076 Source advisory: OSV:PYSEC-2026-3991...

airflow-calendar (>=0.5.0, <=0.9.1), airflow-provider-great-expectations (1.0.0) +2 more potentially affected by CVE-2026-67587 via apache-airflow (>=3.3.0, <=3.3.1rc2)

apache-airflow PYPI version =3.3.0, =0.5.0, =1.3.0, =1.3.1rc2 Source cves: CVE-2026-67587 Source advisory: MEND:CVE-2026-67587...

airflow-calendar (>=0.5.0, <=0.9.1), airflow-provider-great-expectations (1.0.0) +2 more potentially affected by CVE-2026-65017 via apache-airflow (>=3.3.0, <=3.3.1rc2)

apache-airflow PYPI version =3.3.0, =0.5.0, =1.3.0, =1.3.1rc2 Source cves: CVE-2026-65017 Source advisory: MEND:CVE-2026-65017...

galaxy (>=26.0.0, <=26.0.2), great-expectations-cloud (>=20260123.0.0.dev3, <=20260126.1.0.dev0) +2 more potentially affected by CVE-2026-59890 via setuptools (80.10.1)

setuptools PYPI version 80.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - galaxy =26.0.0, =20260123.0.0.dev3, =20260126.1.0.dev0 - netbox-manager 0.20260123.0 - water-column-sonar-processing 26.1.17 Source cves:...

great-expectations-cloud (20250515.0.0) potentially affected by CVE-2026-59890 via setuptools (80.7.0)

setuptools PYPI version 80.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - great-expectations-cloud 20250515.0.0 Source cves: CVE-2026-59890 Source advisory: OSV:GHSA-H35F-9H28-MQ5C...

SUSE-SU-2026:22749-1 Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues The following security issues were fixed: - CVE-2026-31505: iavf: fix out-of-bounds writes in iavfgetethtoolstats bsc1263094. - CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of...

SUSE-SU-2026:22716-1 Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peermep deletion bsc1260524. - CVE-2026-31505: iavf: fix out-of-bounds writes in iavfgetethtoolstats bsc1263094....