Astra Linux – Vulnerability in Cpio

The vulnerability of the readnamefromfile function in the Cpio archiving utility is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause service interruptions...

Astra Linux – Vulnerability in Thunderbird

If a Thunderbird user responded to a crafted HTML email containing a meta tag, where the meta tag had the http-equiv="refresh" attribute, and the content attribute specified a URL, then Thunderbird would initiate a network request to that URL, regardless of any configuration settings that block...

Astra Linux – Vulnerability in Ansible

A flaw in log handling was discovered in Ansible when using the uri module, which exposes sensitive data to content and json output. This flaw allows attackers to access logs or outputs of executed tasks, thereby enabling them to read keys used in playbooks from other users within the uri module...

Astra Linux – Vulnerability in Tomcat9

Exposure of the HTTP Authentication Header to unexpected hosts during the WebSocket authentication vulnerability in Apache Tomcat. This issue affects Apache Tomcat: versions from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.2 through 9.0.117, from 8.5.24 through 8.5.100, an...

Astra Linux – Vulnerability in Firefox and Thunderbird

Additional techniques that built upon the slipstream research, combined with a malicious web page, could have exposed both hosts within an internal network as well as services running on the user’s local machine. This vulnerability affects Firefox versions earlier than 85...

Astra Linux – Vulnerability in docker.io-app

BuildKit is a toolkit for converting source code into build artifacts in an efficient, expressive, and repeatable manner. Two malicious build steps running in parallel, which share the same cache mounts for subpaths, could cause a race condition that allows files from the host system to be...

Astra Linux – Vulnerability in Linux

A vulnerability was discovered in the Linux kernel, where an information leak occurs through the ext4extentheader to the user space...

openssl: SSL_select_next_proto buffer overread

A flaw was found in OpenSSL. Affected versions of this package are vulnerable to Information Exposure through the SSLselectnextproto function. This flaw allows an attacker to cause unexpected application behavior or a crash by exploiting the buffer overread condition when the function is called...

PT-2026-80856

Name of the Vulnerable Software and Affected Versions nektos/act versions 0.2.81 through 0.2.89 Description The software starts an HTTP Artifacts V4 backend when workflows use actions/upload-artifact@v4 or actions/download-artifact@v4. The control-plane RPCs, including 'CreateArtifact',...

PT-2026-81115

Commit: f855e54d5b7bc1c91b977574a03b91eff6b86bb6 Component: mcp-servers/python/python sandbox server/src/python sandbox server/server fastmcp.py Vulnerability RestrictedPython's sandbox in ContextForge's python sandbox server sub-project allows arbitrary Python execution via three compounding...

ROOT-OS-DEBIAN-11-CVE-2026-31393 CVE-2026-31393 in linux - Patched by Root

Root has patched CVE-2026-31393 in the linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-68188 CVE-2025-68188 in linux - Patched by Root

Root has patched CVE-2025-68188 in the linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-53256 CVE-2026-53256 in linux - Patched by Root

Root has patched CVE-2026-53256 in the linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2024-57939 CVE-2024-57939 in linux - Patched by Root

Root has patched CVE-2024-57939 in the linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-68808 CVE-2025-68808 in linux - Patched by Root

Root has patched CVE-2025-68808 in the linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2023-52629 CVE-2023-52629 in linux - Patched by Root

Root has patched CVE-2023-52629 in the linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-53355 CVE-2026-53355 in linux - Patched by Root

Root has patched CVE-2026-53355 in the linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-39968 CVE-2025-39968 in linux - Patched by Root

Root has patched CVE-2025-39968 in the linux package for Root:Debian:11. Multiple fixed versions available...

SUSE CVE-2026-74729

In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: lpc-snoop: Fix usercopy overflow in snoopfileread putfifowithdiscard acts as both producer and consumer on the kfifo: it calls kfifoskip advances out and kfifoput advances in from the IRQ handler without synchronizin...

CVE-2026-78051 alexta69 MeTube Cookie File cookies.txt file access

A vulnerability was determined in alexta69 MeTube up to 2026.06.10. The impacted element is an unknown function of the file /download/.metube/cookies.txt of the component Cookie File Handler. This manipulation causes files or directories accessible. The attack can be initiated remotely. The explo...