GO-2024-2605 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, trillian, caddy, step-ca, caddy-fips, kots, wavefront-collector-for-kubernetes, argo-workflows, step, trillian-fips...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ALSA: wavefront: Fixed integer overflow in sample size validation The wavefrontsendsample function has a problem with integer overflow when validating sample size. The header-size field is of type u32, but it is cast to int for...

CLEANSTART-2026-PY42210 Security fixes in wavefront-proxy 13.8-r0

Package wavefront-proxy version 13.8-r0 fixes 7 vulnerabilities: ghsa-72hv-8253-57qq, ghsa-pwqr-wmgm-9rr8, ghsa-w9fj-cfpg-grvv, ghsa-6hg6-v5c8-fphq, ghsa-3pxv-7cmr-fjr4...

CLEANSTART-2026-ZR97403 Security fixes in wavefront-proxy 13.7-r1

Package wavefront-proxy version 13.7-r1 fixes 1 vulnerabilities: CVE-2026-41417...

CVE-2026-45383

A flaw was found in libde265, an open-source implementation of the H.265 video codec. A remote attacker could exploit a heap buffer overflow vulnerability by providing specially crafted video files. This occurs when decoding a Wavefront Parallel Processing WPP HEVC slice, where malformed headers...

CVE-2026-45383

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.0.19 have a heap buffer overflow out-of-bounds READ exists in decodercontext::decodesliceunitWPP in libde265/decctx.cc. When decoding a WPP Wavefront Parallel Processing HEVC slice, ctbAddrRS is computed as...

CVE-2026-45383 libde265 has a heap buffer overflow (OOB read) in decode_slice_unit_WPP() via out-of-bounds CtbAddrRStoTS access — libde265 <= v1.0.18

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.0.19 have a heap buffer overflow out-of-bounds READ exists in decodercontext::decodesliceunitWPP in libde265/decctx.cc. When decoding a WPP Wavefront Parallel Processing HEVC slice, ctbAddrRS is computed as...

CVE-2026-45383

CVE-2026-45383 affects libde265 prior to 1.0.19, where a heap-buffer-overflow can occur during HEVC WPP slice decoding. In decoder_context::decode_slice_unit_WPP(), ctbAddrRS is computed as ctbRow*ctbsWidth and, if PPS/SPS headers encode a value that exceeds pps.CtbAddrRStoTS.size(), an out-of-bo...

CVE-2026-45383

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.0.19 have a heap buffer overflow out-of-bounds READ exists in decodercontext::decodesliceunitWPP in libde265/decctx.cc. When decoding a WPP Wavefront Parallel Processing HEVC slice, ctbAddrRS is computed as...

CLEANSTART-2026-WG59699 Security fixes for CVE-2024-47535, CVE-2024-47561, CVE-2024-7254, CVE-2025-24970, CVE-2025-25193, CVE-2025-33042, CVE-2025-48924, CVE-2025-55163, CVE-2025-58056, CVE-2025-58057, CVE-2025-67735, CVE-2025-68161, CVE-2026-33870, CVE-2026-33871, CVE-2026-41417, CVE-2026-42577, ghsa-72hv-8253-57qq applied in versions: 13.9-r0, 13.9-r1, 13.9-r2

Multiple security vulnerabilities affect the wavefront-proxy package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JW30455 Security fixes for CVE-2024-47535, CVE-2024-47561, CVE-2024-7254, CVE-2025-24970, CVE-2025-25193, CVE-2025-33042, CVE-2025-48924, CVE-2025-55163, CVE-2025-58056, CVE-2025-58057, CVE-2025-67735, CVE-2025-68161, CVE-2026-41417, CVE-2026-42577, ghsa-3pxv-7cmr-fjr4, ghsa-445c-vh5m-36rj, ghsa-6hg6-v5c8-fphq, ghsa-72hv-8253-57qq, ghsa-pwqr-wmgm-9rr8, ghsa-w9fj-cfpg-grvv applied in versions: 13.7-r0, 13.7-r1, 13.7-r2, 13.9-r0

Multiple security vulnerabilities affect the wavefront-proxy package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MM00120 Security fixes for CVE-2024-47535, CVE-2024-47561, CVE-2024-7254, CVE-2025-24970, CVE-2025-25193, CVE-2025-33042, CVE-2025-48924, CVE-2025-55163, CVE-2025-58056, CVE-2025-58057, CVE-2025-67735, CVE-2025-68161, CVE-2026-41417, ghsa-3pxv-7cmr-fjr4, ghsa-445c-vh5m-36rj, ghsa-6hg6-v5c8-fphq, ghsa-72hv-8253-57qq, ghsa-pwqr-wmgm-9rr8, ghsa-w9fj-cfpg-grvv applied in versions: 13.8-r0, 13.9-r0

Multiple security vulnerabilities affect the wavefront-proxy package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: prometheus-nats-exporter-fips, syft, qemu-guesthelper, consul, flannel-fips, pvc-autoresizer-fips, chaos-mesh, kyverno-policy-reporter-kyverno-plugin, regclient-fips, yunikorn-k8shim, logstash-exporter-fips, rabbitmq-default-user-credential-updater,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: qemu-guesthelper, consul, rabbitmq-default-user-credential-updater, kubeflow-fips, gh, terraform-provider-time-fips, spicedb-operator, cilium-envoy-fips, aws-sigv4-proxy-fips, argo-events-fips, neuvector-dbgen, datadog-operator-fips, quic-go-fips, cfssl, nri-couchbas...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: prometheus-nats-exporter-fips, syft, qemu-guesthelper, consul, flannel-fips, pvc-autoresizer-fips, chaos-mesh, kyverno-policy-reporter-kyverno-plugin, regclient-fips, yunikorn-k8shim, logstash-exporter-fips, rabbitmq-default-user-credential-updater,...

The vulnerability of the `wavefront_send_sample()` function in the sound subsystem of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the wavefrontsendsample function in the sound subsystem of the Linux kernel lies in integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: prometheus-nats-exporter-fips, opentelemetry-collector-contrib-fips, neuvector-sigstore-interface, syft, qemu-guesthelper, consul, flannel-fips, pvc-autoresizer-fips, chaos-mesh, kyverno-policy-reporter-kyverno-plugin, regclient-fips, temporal-fips, yunikorn-k8shim,...

CVE-2025-33042 vulnerabilities

Vulnerabilities for packages: akhq, spark, wavefront-proxy, logstash, apache-pulsar, druid, celeborn...

GHSA-RP46-R563-JRC7 vulnerabilities

Vulnerabilities for packages: akhq, spark, wavefront-proxy, logstash, apache-pulsar, druid, celeborn...

CVE-2025-68344

In the Linux kernel, the following vulnerability has been resolved: ALSA: wavefront: Fix integer overflow in sample size validation The wavefrontsendsample function has an integer overflow issue when validating sample size. The header-size field is u32 but gets cast to int for comparison with...