Astra Linux – Vulnerability in openjpeg2

There is a flaw in the src/lib/openjp2/pi.c file of openjpeg in versions prior to 2.4.0. If an attacker can provide untrusted input to openjpeg’s conversion/encoding functionality, they could cause an out-of-bounds read. The most significant impact of this flaw is the application’s availability...

Astra Linux – Vulnerability in Qt4-X11, qtsvg-opensource-src

In Qt versions prior to 5.15.14, 6.0.x through 6.2.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1, the initialization of munitsPerEm in QtSvg QSvgFont is handled incorrectly...

Astra Linux – Vulnerability in libimage-exiftool-perl

In ExifTool’s lib/Image/ExifTool.pm, version 12.38 incorrectly handles the $file = /|$/ check, resulting in command injection...

Astra Linux – Vulnerability in Firefox

Memory safety bugs exist in Firefox 114. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability affects Firefox versions prior to 115...

Astra Linux - vulnerability in pillow

An issue was found in Pillow prior to version 8.2.0. PSDImagePlugin.PsdImageFile failed to perform a sanity check on the number of input layers relative to the size of the data block. This could result in a denial-of-service condition occurring during Image.open prior to Image.load...

Astra Linux – vulnerability in Chromium

Improper implementation in Fullscreen in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in openjdk-11

Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition products under Oracle Java SE component: Serialization. Affected versions include Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle...

Astra Linux – vulnerability in curl

A authentication bypass vulnerability exists in libcurl prior to v8.0.0; it reuses an SSH connection that has already been established, even though an SSH option was modified—which should have prevented such reuse. libcurl maintains a pool of previously used connections and reuses them for...

CVE-2026-61714

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.2.4 until 2.5.6, configuring synth.midi-channels above 16 allows the MIDI player to index fluidplayert::channelisplaying outside its fixed-size heap allocation while tracking active channels. The resulting...

CVE-2026-78132 vulnerabilities

Vulnerabilities for packages: strongswan...

GHSA-HH8M-FM6V-7CVG vulnerabilities

Vulnerabilities for packages: kubeflow-katib...

GHSA-F47W-MRG9-G9P2 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-workhorse-ce-fips, gitlab-rails-ce-fips, gitlab-runner, gitlab-pages, gitlab-rails-ce, gitlab-workhorse-ce...

CVE-2026-85706 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-workhorse-ce-fips, gitlab-rails-ce-fips, gitlab-runner, gitlab-pages, gitlab-rails-ce, gitlab-workhorse-ce...

CVE-2026-78129 vulnerabilities

Vulnerabilities for packages: strongswan...

GHSA-693G-PPP7-3J2H vulnerabilities

Vulnerabilities for packages: strongswan...

GHSA-J374-979J-MCX7 vulnerabilities

Vulnerabilities for packages: strongswan...

GHSA-M2H6-J472-RP4C vulnerabilities

Vulnerabilities for packages: kserve, az...

CVE-2026-92079

Mitigation bypass in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92064

Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92009

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...