171511 matches found
Astra Linux – Vulnerability in Linux, Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: i40e: Fixed NULL pointer dereferencing in VSI filter synchronization. The issue of NULL pointer dereferencing in sync VSI filters has been eliminated. A new I40EVSIRELEASING flag was added to indicate the deletion and release of...
Astra Linux – vulnerability in linux-5.10, linux-6.1, linux, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix failure to detect DAT corruption in btree and direct mappings Patch series “nilfs2: fix kernel bug at submitbhwbc”. This resolves a kernel BUG reported by syzbot. Since there are two flaws involved, I’ve made each one...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Destroy KFD debugfs after destroy KFD wq Since the KFD proc content has been moved to kernel debugfs, we cannot destroy KFD debugfs before kfdprocessdestroywq. Moving kfdprocessdestroywq prior to kfddebugfsfini fixes ...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: exfat: validate cluster allocation bits of the allocation bitmap syzbot created an exfat image with cluster bits not set for the allocation bitmap. exfat-fs reads and uses the allocation bitmap without checking this. The issue...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: icmp: change the order of rate limits ICMP messages are ratelimited : After the blamed commits, the two rate limiters are applied in this order: 1 host-wide rate limit icmpglobalallow 2 Per-destination rate limit based on inetpee...
Astra Linux - vulnerability in linux
In the Linux kernel, the following vulnerability has been resolved: smackfs: restrict bytes count in smksetcipso Oops, I failed to update the subject line. From 07571157c91b98ce1a4aa70967531e64b78e8346 Mon Sep 17 00:00:00 2001 Date: Mon, 12 Apr 2021 22:25:06 +0900 Subject: PATCH smackfs: restrict...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: octeontx2-af: Added validation before accessing cgx and lmac. With the addition of new MAC blocks such as CN10K RPM and CN10KB RPMUSX, LMACs are noncontiguous, and CGX blocks are also noncontiguous. However, during the RVU...
Astra Linux – vulnerability in linux-5.10, linux-5.15, linux-6.1
In the Linux kernel, the following vulnerability has been resolved: media: v4l2-tpg: fix some memleaks in tpgalloc In tpgalloc, resources must be deallocated in every error-handling path, as they are allocated via for statements. Otherwise, memleaks would occur since tpgfree is only called when...
Astra Linux – vulnerability in modsecurity-apache
ModSecurity is an open source, cross-platform web application firewall WAF engine for Apache, IIS, and Nginx. Versions up to and including 2.9.8 are vulnerable to denial of service under a specific condition: when the payload’s content type is application/json, and there exists at least one rule...
Astra Linux – vulnerability in squid
Squid is a caching proxy for the Web. Due to an expired pointer reference bug, Squid versions prior to 6.6 are vulnerable to a Denial of Service attack targeting error responses from the Cache Manager. This issue enables a trusted client to trigger a Denial of Service by generating error pages fo...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: Firmware: csdsp: Prevent buffer overrun when processing V2 algorithm headers Ensure that all fields within a V2 algorithm header fit within the available firmware data buffer. The wmfw V2 format introduced variable-length strings...
code-shield
code-shield 한국어 · English An MVP that normalizes vulnerability findings in C/C++ protocol and platform code into reproducible evidence and verifies candidate patches in isolated copies of the target. The repository is named code-shield; the public Python package and CLI use the neutral internal...
ROOT-APP-MAVEN-CVE-2024-38821 CVE-2024-38821 in org.springframework.security:spring-security-web - Patched by Root
Root has patched CVE-2024-38821 in the org.springframework.security:spring-security-web package for Root:Maven. Multiple fixed versions available...
PYSEC-2026-4262 PraisonAI: Platform member PATCH routes allow owner resource rewrites and project lead reassignment delete bypass
Platform member PATCH routes allow owner resource rewrites and project lead reassignment delete bypass Summary praisonai-platform lets an ordinary workspace member patch owner-created project, issue, and agent records even though the paired delete routes enforce owner/admin authorization. For...
PraisonAI: Platform member PATCH routes allow owner resource rewrites and project lead reassignment delete bypass
Platform member PATCH routes allow owner resource rewrites and project lead reassignment delete bypass Summarypraisonai-platform lets an ordinary workspace member patch owner-created project, issue, and agent records even though the paired delete routes enforce owner/admin authorization. For...
ROOT-OS-DEBIAN-13-CVE-2026-8932 CVE-2026-8932 in curl - Patched by Root
Root has patched CVE-2026-8932 in the curl package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-10966 CVE-2025-10966 in curl - Patched by Root
Root has patched CVE-2025-10966 in the curl package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2024-26461 CVE-2024-26461 in krb5 - Patched by Root
Root has patched CVE-2024-26461 in the krb5 package for Root:Debian:12. Multiple fixed versions available...