Astra Linux – Vulnerability in WebKit2GTK

The issue was addressed through improved checks. This issue is fixed in Safari 18.5, iOS 18.5, iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, and watchOS 11.5. Processing maliciously crafted web content may lead to an unexpected process crash...

Astra Linux – Vulnerability in WebKit2GTK

The issue was resolved by adding additional restrictions on CSS compositing. This issue has been fixed in tvOS 15, watchOS 8, iOS 15, and iPadOS 15. Visiting a maliciously crafted website may reveal a user’s browsing history...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ppp: Rejects packets that are claimed to be LCP packets but are actually malformed packets. Since pppasyncencode assumes that the packets are valid LCP packets with codes from 1 to 7 inclusive, add pppcheckpacket to ensure that t...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: drm/stm: Avoid use-after-free issues with crtc and plane The function ltdcload calls the functions drmcrtcinitwithplanes, drmuniversalplaneinit, and drmencoderinit. These functions should not be called with parameters allocate...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: igc: Avoid returning the frame twice in XDPREDIRECT When a frame cannot be transmitted via XDPREDIRECT e.g., due to a full queue, it is necessary to free the frame by calling xdpreturnframerxnapi. However, this is the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Power: Supply: gpio-charger: Fixed the issue related to setting charge current limits. The issue involved devices that allow the lowest charge current limit to be greater than zero. If the requested charge current limit is below...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: rfcomm: Fixed a nullptrderef issue in rfcommchecksecurity. During our fuzz testing of the connection and disconnection processes at the RFCOMM layer, we discovered this bug. By comparing the packets generated during a...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Security issue: Restrict CONFIGZEROCALLUSEDREGS to GCC or Clang version 15.0.6 or later. A bug in Clang’s implementation of -fzero-call-used-regs can lead to NULL pointer dereferencing see the links above the check for more...

Astra Linux – Vulnerability in Tomcat9

There is a vulnerability related to improper input validation in Apache Tomcat Native and Apache Tomcat. When using an OCSP responder, Apache Tomcat Native and Tomcat’s FFM port of the Apache Tomcat Native code failed to perform verification or freshness checks on the OCSP response, allowing...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: Squashfs: sanity check for symbolic link sizes Syzkiller reports a bug named “KMSAN: uninit-value in picklink”. This issue is caused by an uninitialized page, which ultimately results from reading a corrupted symbolic link siz...

RHEL 8 : perl:5.32 (RHSA-2026:67278)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:67278 advisory. Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes: perl: Perl:...

OPENSUSE-SU-2026:11767-1 bson-devel-2.5.3-1.1 on GA media

These are all security issues fixed in the bson-devel-2.5.3-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-90707

These are all security issues fixed in the perl-DBI-1.653.0-1.1 package on the GA media of openSUSE Tumbleweed...

Moderate: Red Hat Security Advisory: Red Hat Ansible Automation Platform Execution Environments Update

An update is now available for Red Hat Ansible Automation Platform Execution Environments Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to...

ROOT-APP-NPM-CVE-2026-33671 CVE-2026-33671 in picomatch - Patched by Root

Root has patched CVE-2026-33671 in the picomatch package for Root:npm. Multiple fixed versions available...

OPENSUSE-SU-2026:11743-1 google-osconfig-agent-20260908.00-1.1 on GA media

These are all security issues fixed in the google-osconfig-agent-20260908.00-1.1 package on the GA media of openSUSE Tumbleweed...

python-lxml security update

4.6.5-3.1 - Security fix for CVE-2026-49825 - Resolves: RHEL-251499...

Fedora 43 : rust-ppmd-rust (2026-a9bf99671c)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-a9bf99671c advisory. Update to version 1.4.1; Fixes RHBZ2526655 Security fix for GHSA-rqc2-j9v2-j22v, an out-of-bounds read in the PPMd8 decoder. Tenable has extracted the...

corosync-3.1.10-5.1 on GA media (moderate)

corosync-3.1.10-5.1 on GA media Announcement ID: openSUSE-SU-2026:11715-1 Rating: moderate Cross-References: CVE-2026-81665 CVE-2026-81666 CVSS scores: CVE-2026-81665 SUSE : 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-81665 SUSE : 7.7...

RHEL 9 : kernel (RHSA-2026:66180)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:66180 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: KVM: nSVM: Always use vmcb01 ...