Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: lib/crypto: mpi: Fixed integer underflow in mpireadrawfromsgl Yiming reported an integer underflow in mpireadrawfromsgl when subtracting “lzeros” from the unsigned “nbytes”. For this to occur, the scatterlist “sgl” needs to occup...

mpi-cbs-mediforms (0.1.0a2) potentially affected by CVE-2026-106443 via weasyprint (58.0.0)

weasyprint PYPI version 58.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - mpi-cbs-mediforms 0.1.0a2 Source cves: CVE-2026-106443 Source advisory: OSV:PYSEC-2026-4311...

mpi-cbs-mediforms (>=0.1.0a3, <=0.3.1rc29) potentially affected by CVE-2026-106443 via weasyprint (53.0.0)

weasyprint PYPI version 53.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - mpi-cbs-mediforms =0.1.0a3, =0.3.1rc29 Source cves: CVE-2026-106443 Source advisory: OSV:PYSEC-2026-4311...

mpi-cbs-mediforms (>=0.1.0a3, <=0.3.1rc29) potentially affected by CVE-2026-106443 via weasyprint (53.0.0)

weasyprint PYPI version 53.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - mpi-cbs-mediforms =0.1.0a3, =0.3.1rc29 Source cves: CVE-2026-106443 Source advisory: OSV:GHSA-R543-Q48M-4C9J...

mpi-cbs-mediforms (0.1.0a2) potentially affected by CVE-2026-106443 via weasyprint (58.0.0)

weasyprint PYPI version 58.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - mpi-cbs-mediforms 0.1.0a2 Source cves: CVE-2026-106443 Source advisory: OSV:GHSA-R543-Q48M-4C9J...

AlmaLinux 9.6 [TuxCare] Security Update: hwloc / hwloc-devel / hwloc-gui / hwloc-libs / hwloc-plugins (ALMALINUX9.6:CLSA-2026:1785770281)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785770281 advisory. - An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpuset...

Rocky Linux 9.6 [TuxCare] Security Update: hwloc / hwloc-devel / hwloc-gui / hwloc-libs / hwloc-plugins (ALMALINUX9.6:CLSA-2026:1785770281)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785770281 advisory. - An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpus...

AlmaLinux 9.2 [TuxCare] Security Update: hwloc / hwloc-devel / hwloc-gui / hwloc-libs / hwloc-plugins (ALMALINUX9.2:CLSA-2026:1785768115)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1785768115 advisory. - An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpuset...

lib/crypto/mpi/mpicoder Heap Buffer Overflow DoS

The vulnerability of the mpireadrawfromsgl function in the lib/crypto/mpi/mpicoder.c module of the Linux kernel is related to a fixed-point overflow or cyclic shift. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260925-73-0021

The vulnerability of the mpicmpui function in the lib/crypto/mpi/mpi-cmp.c module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fixed task leakage in pm8001sendabortall In pm8001sendabortall, ensure that the allocated SAS task is freed if pm8001tagalloc or pm8001mpibuildcmd fails...

mpi-cbs-mediforms (>=0.1.0a3, <=0.3.1rc29) potentially affected by CVE-2026-55073 via weasyprint (53.0.0)

weasyprint PYPI version 53.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - mpi-cbs-mediforms =0.1.0a3, =0.3.1rc29 Source cves: CVE-2026-55073 Source advisory: OSV:PYSEC-2026-3940...

mpi-cbs-mediforms (0.1.0a2) potentially affected by CVE-2026-55073 via weasyprint (58.0.0)

weasyprint PYPI version 58.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - mpi-cbs-mediforms 0.1.0a2 Source cves: CVE-2026-55073 Source advisory: OSV:PYSEC-2026-3940...

mpi-cbs-mediforms (0.1.0a2) potentially affected by CVE-2026-55073 via weasyprint (58.0.0)

weasyprint PYPI version 58.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - mpi-cbs-mediforms 0.1.0a2 Source cves: CVE-2026-55073 Source advisory: OSV:GHSA-JF6Q-CHMF-3H3V...

mpi-cbs-mediforms (>=0.1.0a3, <=0.3.1rc29) potentially affected by CVE-2026-55073 via weasyprint (53.0.0)

weasyprint PYPI version 53.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - mpi-cbs-mediforms =0.1.0a3, =0.3.1rc29 Source cves: CVE-2026-55073 Source advisory: OSV:GHSA-JF6Q-CHMF-3H3V...

Malicious code in @zalastax/nolb-mpi (npm)

The package @zalastax/nolb-mpi was found to contain malicious code. --- Credit: OpenSSF source...

EulerOS 2.0 SP11 : libsolv (EulerOS-SA-2026-3078)

According to the versions of the libsolv packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted .solv file containing...

CVE-2026-11743

The SF32LB MPI QSPI NOR flash driver drivers/flash/flashsf32lbmpiqspinor.c validated the flash offset and length on its read and write paths with the test offset + size data-size. Because offset is a signed offt while size is unsigned, a negative offset is converted to a large unsigned value and...

CVE-2026-11743: Out-of-bounds Read

The SF32LB MPI QSPI NOR flash driver drivers/flash/flashsf32lbmpiqspinor.c validated the flash offset and length on its read and write paths with the test offset + size data-size. Because offset is a signed offt while size is unsigned, a negative offset is converted to a large unsigned value and...

PT-2026-69147

Name of the Vulnerable Software and Affected Versions SF32LB MPI QSPI NOR flash driver affected versions not specified Description The SF32LB MPI QSPI NOR flash driver in drivers/flash/flash sf32lb mpi qspi nor.c contains an integer signedness error in its read and write paths. The driver validat...