28771 matches found
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: fbdev/ep93xx-fb: Do not assign to struct fbinfo.dev. Do not assign the Linux device to struct fbinfo.dev. The call to registerframebuffer initializes the field to the fbdev device. Drivers should not override its value. Fixed a b...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: ocfs2: Remove the unreasonable unlock in ocfs2readblocks. Patch series “Misc fixes for ocfs2readblocks”, version 5. This series contains two fixes for ocfs2readblocks. The first patch addresses the issue reported by syzbot, which...
Astra Linux – Vulnerability in Redis
Redis is an open-source, in-memory database that persists data on disk. A authenticated user can use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. This issue exists in all versions of Redis that support L...
ROOT-APP-PYPI-GHSA-78CV-MQJ4-43F7 GHSA-78cv-mqj4-43f7 in tornado - Patched by Root
Root has patched GHSA-78cv-mqj4-43f7 in the tornado package for Root:PyPI. Multiple fixed versions available...
Astra Linux – Vulnerability in OpenSSL
In addition to the crehash shell command injection identified in CVE-2022-1292, further instances where the crehash script fails to properly sanitize shell metacharacters to prevent command injection were discovered during code reviews. When CVE-2022-1292 was fixed, it wasn’t recognized that ther...
Astra Linux – Vulnerability in OpenSSL
AES OCB mode for 32-bit x86 platforms, using the AES-NI assembly-optimized implementation, may not encrypt all of the data under certain circumstances. This could reveal sixteen bytes of data that were already present in the memory but were not written. In the special case of “in-place” encryptio...
Astra Linux – Vulnerability in Git
Git is a revision control system. By using a specially crafted repository, Git versions prior to 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8 could be tricked into using its local clone optimization, even when using a non-local transport. Although Git will...
ROOT-APP-NPM-CVE-2026-44488 CVE-2026-44488 in axios - Patched by Root
Root has patched CVE-2026-44488 in the axios package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-42041 CVE-2026-42041 in axios - Patched by Root
Root has patched CVE-2026-42041 in the axios package for Root:npm. Multiple fixed versions available...
CLSA-2026-1789372028 TuxCare security update for com.mchange:c3p0 (2 CVEs)
TuxCare rebuilt com.mchange:c3p0 to address 2 CVEs. Fixed in 0.9.5.3-tuxcare.1...
CLSA-2026-1789371263 TuxCare security update for org.springframework.amqp (3 CVEs)
TuxCare rebuilt 7 org.springframework.amqp packages to address 3 CVEs. Fixed in 3.2.12-tuxcare.1...
PT-2026-92182
Name of the Vulnerable Software and Affected Versions znc versions prior to 1.10.3-1.1 Description Security issues were identified and subsequently fixed in the znc-1.10.3-1.1 package on the GA media of openSUSE Tumbleweed. Recommendations Update to version 1.10.3-1.1...
Release Information for Veeam Backup for Microsoft 365 8.6
Requirements This release can be used to: upgrade an existing v8, v8.1, v8.2, v8.3, v8.4, or v8.5 deployment of Veeam Backup for Microsoft 365 to v8.6. install a new deployment of Veeam Backup for Microsoft 365 v8.6. After installing this release, the Veeam Backup for Microsoft 365 build number...
Fedora 44 : rust-hickory-net / rust-hickory-proto / rust-hickory-resolver (2026-3c1acd5a65)
The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-3c1acd5a65 advisory. Update hickory-dns crates to version 0.26.2. This includes fixes for a large number of security relevant bugs. Release notes:...
redamon v6.14.1
Unmask the hidden before the world does An autonomous AI framework that chains reconnaissance, exploitation, and post-exploitation into a single pipeline, then goes further by triaging every finding, implementing code fixes, and opening pull requests on your repository. From first packet to merge...
PT-2026-90937
These are all security issues fixed in the syncthing-2.1.5-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11766-1 hauler-2.1.0-4.1 on GA media
These are all security issues fixed in the hauler-2.1.0-4.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-90935
These are all security issues fixed in the hauler-2.1.0-4.1 package on the GA media of openSUSE Tumbleweed...