Astra Linux – vulnerability in poppler

An issue was found in Poppler 0.71.0. There is a reachable abort in Object.h; this will result in a denial of service since EmbFile::save2 in FileSpec.cc fails to perform a stream check prior to saving an embedded file...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: ubifs: skip dumping tnc tree when zroot is null Clearing the slab cache frees all znodes in memory and sets c-zroot.znode to NULL; subsequently, dumping the tnc tree accesses c-zroot.znode, leading to a null pointer dereference...

Astra Linux – vulnerability in linux, linux-5.10, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not free qgroup space unless specified Boris noticed during his simple quotas testing that a leak occurred due to Sweet Tea’s change in subvol create functionality, which prevented a transaction commit. This was merely ...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: fs: Prevent file descriptor table allocations exceeding INTMAX When sysctlnropen is set to a very high value for example, 1073741816 as set by systemd, processes attempting to use file descriptors near the limit can trigger massi...

Astra Linux – Vulnerability in binutils

In GNU Binutils 2.31.1, there is a use-after-free in the error function in elfcomm.c when called from the processarchive function in readelf.c via a crafted ELF file...

Astra Linux - vulnerability in linux

In the Linux kernel, the following vulnerability has been resolved: NFS: fix an incorrect limit in filelayoutdecodelayout “sizeofstruct nfsfh” is two bytes too large and could lead to memory corruption. It should be NFSMAXFHSIZE because that’s the size of the -data buffer. I reversed the size of...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: jfs: fixed a slab-out-of-bounds read in eaget During the “sizecheck” step in eaget, the code checks whether the extended attribute list xattr size matches easize. If not, it logs “eaget: invalid extended attribute” and calls...

Astra Linux – Vulnerability in binutils

In the GNU Binutils before version 2.40, there is a heap-buffer-overflow issue in the error function bfdgetl32 when called from the stripmain function in strip-new, through a specially crafted file...

Astra Linux – Vulnerability in libde265

Libde265 v1.0.4 contains a heap buffer overflow in the putweightedbipred16fallback function, which can be exploited through a specially crafted file...

Astra Linux – vulnerability in libde265

LibDe265 v1.0.4 contains a global buffer overflow in the decodeCABACbit function, which can be exploited via a specially crafted file...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: erofs: fix memory leak of LZMA global compressed deduplication When stress-testing microLZMA EROFS images with the new global compressed deduplication feature enabled -Ededupe, I found that some short-lived temporary pages were n...

Astra Linux – vulnerability in linux, linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: jfs: Fix array-index-out-of-bounds in diFree...

Astra Linux – vulnerability in linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix deadlock in smb2findsmbtcon Unlock cifstcpseslock before calling cifsputsmbses to avoid such deadlock...

Astra Linux – Vulnerability in imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, an attacker who could connect to the magick-distribute-cache service could hijack a file descriptor in the server process when a race condition occurred. This...

Astra Linux – vulnerability in linux-5.10

In the Linux kernel, the following vulnerability has been resolved: ceph: fix possible deadlock when holding Fwb to get inlinedata 1. Mount with wsync. 2. Create a file with ORDWR, and the request was sent to mds.0: cephatomicopen-- cephmdscdorequestopenc finishopenfile, dentry, cephopen--...

Astra Linux – vulnerability in Chromium

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code inside a sandbox via a malicious file. Chromium security severity: Medium...

Astra Linux – vulnerability in emacs

In Org Mode, the org-babel-execute:latex command in ob-latex.el is available up to version 9.6.1 for GNU Emacs; this allows attackers to execute arbitrary commands by using a filename or directory name containing shell metacharacters...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mm, thp: Bail out early for writeback pages in collapsefile Currently, collapsefile does not explicitly check PGwriteback. Instead, pagehasprivate and trytoreleasepage are used to filter writeback pages. This approach does not wo...

Astra Linux – vulnerability in Chromium

Insufficient validation of untrusted input in Notifications in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted PDF file. Chromium security severity: Low...

Astra Linux – vulnerability in linux-6.1, linux-5.10, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a race when updating an existing write After nfslockandjoinrequests checks whether the request is still attached to the mapping, nothing prevents a call to nfsinoderemoverequest from succeeding until we actually lock the...