163461 matches found
Astra Linux – Vulnerability in Firefox and Thunderbird
A malicious website could have learned the size of a cross-origin resource that supported Range requests. This vulnerability affects Thunderbird 91.10, Firefox 101, and Firefox ESR 91.10...
Astra Linux – Vulnerability in openjdk-11
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition products of Oracle Java SE component: JAXP. The supported versions affected by this vulnerability include Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK:...
Astra Linux – Vulnerability in Thunderbird
OpenPGP secret keys that were imported using Thunderbird versions 78.8.1 up to 78.10.1 were stored unencrypted on the user’s local disk. The master password protection was inactive for those keys. Version 78.10.2 will restore the protection mechanism for newly imported keys, and will automaticall...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: bfs: Reconstructing the file type when loading from disk syzbot reports that the SIFMT bits of the inode-imode field can become invalid when: 1. The 32-bit “mode” field loaded from disk is corrupted; 2. The 32-bit “attributes”...
Astra Linux – Vulnerability in Ceph
Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the x-amz-copy-source argument to copy an object and specifying an empty string as its content resulted in the RGW daemon crashing, leading to a DoS attack. As of the time of publication,...
Astra Linux – Vulnerability in openjdk-11
Vulnerability in the Oracle Java SE and Oracle GraalVM Enterprise Edition products of Oracle Java SE component: Libraries. The supported versions affected include Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1, and 22.0.0.2. This easily...
Astra Linux – Vulnerability in Tomcat9
Path Equivalence: The use of ‘file.Name’ an internal dot notation can lead to Remote Code Execution, information disclosure, or the addition of malicious content to uploaded files via the write-enabled Default Servlet in Apache Tomcat. This issue affects Apache Tomcat versions as follows: 11.0.0-...
ROOT-APP-NUGET-CVE-2025-26646 CVE-2025-26646 in Microsoft.Build.Tasks.Core - Patched by Root
Root has patched CVE-2025-26646 in the Microsoft.Build.Tasks.Core package for Root:NuGet. Multiple fixed versions available...
BIT-ARGO-CD-2025-55191 Repository Credentials Race Condition Crashes Argo CD Server
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions between 2.1.0 and 2.14.19, 3.2.0, 3.1.0 through 3.1.7, and 3.0.0 through 3.0.18 contain a race condition in the repository credentials handler that can cause the Argo CD server to panic and crash when concurrent...
ROOT-APP-PYPI-CVE-2026-34073 CVE-2026-34073 in cryptography - Patched by Root
Root has patched CVE-2026-34073 in the cryptography package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-537C-GMF6-5CCF GHSA-537c-gmf6-5ccf in cryptography - Patched by Root
Root has patched GHSA-537c-gmf6-5ccf in the cryptography package for Root:PyPI. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-47906 CVE-2025-47906 in golang-1.24 - Patched by Root
Root has patched CVE-2025-47906 in the golang-1.24 package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-61723 CVE-2025-61723 in golang-1.24 - Patched by Root
Root has patched CVE-2025-61723 in the golang-1.24 package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-68119 CVE-2025-68119 in golang-1.24 - Patched by Root
Root has patched CVE-2025-68119 in the golang-1.24 package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-68121 CVE-2025-68121 in golang-1.24 - Patched by Root
Root has patched CVE-2025-68121 in the golang-1.24 package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-61731 CVE-2025-61731 in golang-1.24 - Patched by Root
Root has patched CVE-2025-61731 in the golang-1.24 package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-27143 CVE-2026-27143 in golang-1.24 - Patched by Root
Root has patched CVE-2026-27143 in the golang-1.24 package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-58189 CVE-2025-58189 in golang-1.24 - Patched by Root
Root has patched CVE-2025-58189 in the golang-1.24 package for Root:Debian:13. Multiple fixed versions available...