Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix reflink preserve cleanup issue Commit c06c303832ec “ocfs2: fix xattr array entry countedby error” does not handle all cases and fails to properly clean up preserved xattr entries. Still contains bugs: - The ‘last’...

Astra Linux – vulnerability in Chromium

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially perform out of bounds memory access via a crafted video file. Chromium security severity: Low...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ext4: detect invalid INLINEDATA + EXTENTS flag combination SyZBot reported a BUGON in ext4escacheextent when opening a verity file on a corrupted ext4 filesystem mounted without a journal. The issue is that the filesystem has an...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree When the value of lp is 0 at the beginning of the for loop, it will become negative in the next assignment and we should bail out...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in jfsreaddir The stbl might contain some invalid values. Added a check to return an error code in that case...

Astra Linux – vulnerability in freerdp3

FreeRDP versions prior to 3.29.0 fail to properly validate server-supplied RDPDR paths during drive redirection, enabling attackers to access prefix-sibling paths outside the configured shared root. A malicious RDP server can read, write, delete, and enumerate files in sibling directories by...

Astra Linux – Vulnerability in libxml2

In libxml2 versions before 2.9.14, several buffer handling functions in buf.c xmlBuf and tree.c xmlBuffer do not check for integer overflows. This can lead to out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software that uses libxml2’s...

Astra Linux – Vulnerability in unbound

Unbound from NLnet Labs, including versions up to and including 1.12.0, and NSD from NLnet Labs, including versions up to and including 4.3.3, contain a local vulnerability that allows for a local symlink attack. When creating the PID file, Unbound and NSD either create the file if it does not...

CVE-2026-111093

JetBrains Datalore versions prior to 2026.2.1 are vulnerable to an unauthenticated path traversal vulnerability within the report blob endpoint . This flaw, categorized as CWE-23 , allows an attacker to perform arbitrary file reading on the system. The vulnerability has a CVSS 3.1 score of 7.5 (H...

CVE-2026-111093

In JetBrains Datalore before 2026.2.1 unauthenticated path traversal via the report blob endpoint allowed reading arbitrary files...

CLSA-2026-1792078022 ghostscript: Fix of 6 CVEs

CVE-2023-28879: fix buffer overrun in TBCP encoding - CVE-2023-38559: fix out-of-bounds read in devnpcxwriterle - CVE-2023-46751: fix dangling file pointer in gdevprnopenprinterseekable - CVE-2024-46951: check the type of the Pattern Implementation - CVE-2024-46953: check for overflow validating...

CLSA-2026-1792077881 ghostscript: Fix of 6 CVEs

CVE-2023-28879: fix buffer overrun in TBCP encoding - CVE-2023-38559: fix out-of-bounds read in devnpcxwriterle - CVE-2023-46751: fix dangling file pointer in gdevprnopenprinterseekable - CVE-2024-46951: check the type of the Pattern Implementation - CVE-2024-46953: check for overflow validating...

CVE-2026-79843

A corrupted file may cause out-of-bounds read in HPE NonStop SQL/MX EXE under certain conditions, potentially leading to information disclosure, process termination, CPU halt, or data corruption...

CVE-2026-103508

P4 Search formerly Helix Search allows an authenticated user holding administrative privileges on the connected P4 Server to supply a crafted logging configuration that causes files to be written or deleted outside the intended logging directory. This could lead to code execution as the P4 Search...

CVE-2026-58393

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the OpenVPN Client Specific Override commonname field accepts path traversal sequences and openvpncscconfwrite concatenates the value into /var/etc/openvpn-csc// without normalization or a basename check. The...

CVE-2026-57155 OPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importer

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the Firewall Alias GeoIP importer's processzip and processgzip paths in src/opnsense/scripts/filter/lib/alias/geoip.py use an unvalidated CSV countrycode value to construct output filenames below...

CVE-2026-57155 OPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importer

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the Firewall Alias GeoIP importer's processzip and processgzip paths in src/opnsense/scripts/filter/lib/alias/geoip.py use an unvalidated CSV countrycode value to construct output filenames below...

CVE-2026-57155 OPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importer

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the Firewall Alias GeoIP importer's processzip and processgzip paths in src/opnsense/scripts/filter/lib/alias/geoip.py use an unvalidated CSV countrycode value to construct output filenames below...

EUVD-2026-102114

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the Firewall Alias GeoIP importer's processzip and processgzip paths in src/opnsense/scripts/filter/lib/alias/geoip.py use an unvalidated CSV countrycode value to construct output filenames below...

CVE-2026-57155

OPNsense versions prior to 26.1.11 and 26.4.1p1 are vulnerable to Root Remote Code Execution (RCE) via an arbitrary file write in the Firewall Alias GeoIP importer . The root cause is an unvalidated CSV country_code value in the process_zip() and process_gzip() paths of src/opnsense/scripts/filte...