RHSA-2026:59137 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.7 Product Security and Bug Fix Update

Bulletin has no description...

TYPO3-EXT-SA-2026-016: Information Disclosure in extension "Modules" (modules)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-016...

CVE-2026-55477

creationtimestamp| type| source ---|---|--- 2026-08-24 22:35:03+00:00| published-proof-of-concept| https://github.com/MHSanaei/3x-ui/security/advisories/GHSA-jm48-m3rr-9hgg 2026-08-25 12:31:18+00:00| seen| https://gist.github.com/alon710/782a9d0e0a33092c615e2219299ab6e3...

CVE-2025-34555

creationtimestamp| type| source ---|---|--- 2026-08-24 21:00:04+00:00| seen| Telegram/0Lzh2WjQOWsuTydOWekHZzZKDiwWQ3jcpMbWJHlr9UUA 2026-08-25 00:00:08+00:00| published-proof-of-concept| Telegram/0Lzh2WjQOWsuTydOWekHZzZKDiwWQ3jcpMbWJHlr9UUA...

DEBIAN-CVE-2026-78475

A flaw was found in the file-pix ESM plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array VLA on the stack without proper bounds checking, causing an unbounded stack allocation followed by a 21-byte stack over-read. This can result in a...

ROOT-OS-DEBIAN-13-CVE-2026-48962 CVE-2026-48962 in perl - Patched by Root

Root has patched CVE-2026-48962 in the perl package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-32740 CVE-2026-32740 in libheif - Patched by Root

Root has patched CVE-2026-32740 in the libheif package for Root:Debian:13. Multiple fixed versions available...

CVE-2026-19685

NetworkManager did not apply the privateuser restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise 802.1X connection profile's CA path at an...

ROOT-OS-DEBIAN-13-CVE-2026-66035 CVE-2026-66035 in libssh2 - Patched by Root

Root has patched CVE-2026-66035 in the libssh2 package for Root:Debian:13. Multiple fixed versions available...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in twitter-bootstrap3

A security vulnerability has been discovered in Bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is related to the “data-loading-text” attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into this attribute,...

Astra Linux – Vulnerability in Firefox

A transient execution vulnerability, named Floating Point Value Injection FPVI, allowed attackers to leak arbitrary memory addresses and may have also enabled JIT type confusion attacks. A related vulnerability, Speculative Code Store Bypass SCSB, did not affect Firefox. This vulnerability affect...

Astra Linux – Vulnerability in Firefox

A type confusion bug in WebAssembly could be exploited by an attacker to potentially execute malicious code. This vulnerability affects Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1...

Astra Linux – Vulnerability in sane-backends

A heap buffer overflow in SANE backends before version 1.0.30 allows a malicious device connected to the same local network as the victim to execute arbitrary code, known as GHSL-2020-080...

Astra Linux – Vulnerability in freerdp2

FreeRDP is a free remote desktop protocol library and client. Affected versions of FreeRDP lack input validation in the urbdrc channel. A malicious server can trick a FreeRDP-based client into crashing due to a division by zero. This issue has been addressed in version 2.9.0. All users are advise...

Astra Linux – Vulnerability in protobuf

A parsing vulnerability exists for the MessageSet type in ProtocolBuffers versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1, and 3.21.5 for protobuf-cpp, and versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1, and 4.21.5 for protobuf-python. A specially...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

Astra Linux – Vulnerability in junit4

In JUnit 4, versions starting from 4.7 and before 4.13.1, the TemporaryFolder test rule contains a local information disclosure vulnerability. On Unix-like systems, the system’s temporary directory is shared among all users on that system. As a result, when files and directories are written to th...

RHSA-2026:58574 Red Hat Security Advisory: libarchive security update

Bulletin has no description...

firefox: thunderbird: Internally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another...