ROOT-OS-DEBIAN-13-CVE-2026-56373 CVE-2026-56373 in imagemagick - Patched by Root

Root has patched CVE-2026-56373 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-56366 CVE-2026-56366 in imagemagick - Patched by Root

Root has patched CVE-2026-56366 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-61465 CVE-2026-61465 in imagemagick - Patched by Root

Root has patched CVE-2026-61465 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-10966 CVE-2025-10966 in curl - Patched by Root

Root has patched CVE-2025-10966 in the curl package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-4873 CVE-2026-4873 in curl - Patched by Root

Root has patched CVE-2026-4873 in the curl package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-5435 CVE-2026-5435 in glibc - Patched by Root

Root has patched CVE-2026-5435 in the glibc package for Root:Debian:12. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2024-6345 CVE-2024-6345 in setuptools - Patched by Root

Root has patched CVE-2024-6345 in the setuptools package for Root:PyPI. Multiple fixed versions available...

CVE-2026-92033

Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 156...

ROOT-OS-DEBIAN-11-CVE-2023-34152 CVE-2023-34152 in imagemagick - Patched by Root

Root has patched CVE-2023-34152 in the imagemagick package for Root:Debian:11. Multiple fixed versions available...

CLSA-2026-1789453348 TuxCare security update for werkzeug (4 CVEs)

TuxCare rebuilt werkzeug to address 4 CVEs. Fixed in 2.3.8.post3+tuxcare...

ROOT-APP-NPM-CVE-2024-45590 CVE-2024-45590 in body-parser - Patched by Root

Root has patched CVE-2024-45590 in the body-parser package for Root:npm. Multiple fixed versions available...

Astra Linux – Vulnerability in binutils

A vulnerability has been discovered in GNU Binutils 2.45. The affected element is the function elfswapshdr in the bfd/elfcode.h library of the Linker component. Manipulation of this function leads to a heap-based buffer overflow. This attack must be carried out locally. The exploit has been...

Astra Linux – Vulnerability in symfony

Symfony/http-foundation is a module for the Symphony PHP framework that defines an object-oriented layer for handling HTTP requests. The Request class does not parse URIs containing special characters in the same way that browsers do. As a result, attackers can trick validators that rely on the...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: atl1c: Workaround for the DMA RX overflow issue. This work is based on the alx driver commit 881d0327db37 “net: alx: Workaround for the DMA RX overflow issue”. The alx and atl1c drivers both had RX overflow errors; therefore, ...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: Added a missing check for allocorderedworkqueue. Added a check on the return value of allocorderedworkqueue, as it may return a NULL pointer, leading to a NULL pointer dereferencing issue. Patchwork:...

Astra Linux – Vulnerability in python-pip

When extracting a tar archive, pip may not check symbolic links pointing into the extraction directory if the tarfile module does not implement PEP 706. Note that upgrading pip to a “fixed” version does not fix all vulnerabilities that are mitigated by using a Python version that implements PEP...

Astra Linux – Vulnerability in Linux 5.10

A double-free bug in the packetsetring function in net/packet/afpacket.c can be exploited by a local user through crafted syscalls to escalate privileges or deny services. We recommend upgrading the kernel to a version that is not affected by this bug, or rebuilding the code after the...

Astra Linux – Vulnerability in gpac

A vulnerability was discovered in GPAC version 2.4. It has been rated as problematic. The affected function is gfdashdownloadinitsegment in the file src/mediatools/dashclient.c. Manipulating the baseiniturl argument leads to a null pointer dereference. This attack can be launched remotely. The...

Astra Linux – Vulnerability in Twisted

Twisted is an event-based framework for internet applications. Prior to version 23.10.0rc1, when sending multiple HTTP requests in one TCP packet, twisted.web would process the requests asynchronously, without guaranteeing the order of responses. If either of the endpoints was controlled by an...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Validating the payload size in the IPC response When installing malicious ksmbd-tools, ksmbd.mountd may return an invalid IPC response to the ksmbd kernel server. ksmbd should validate the payload size of the IPC response...