ืขืืืขืืข ืืขืคืขืจืืขืืข ืฉืืืืืงืืืื ืืขื ืขื ืื ืืืขืงื ืืขืืืึธืจื ืืื ืื ืืขืฆืืข ืืขื, ืจืืึฟ ืคืื ืืืขืืืข ืงืขื ืขื ืืืืกืืขื ืืฆื ืืืขืจื ืคืื ืืืืืื ืก:
- ืืื ืืขืจ ืคึผืึทืืฉ ืืืืกืืึทืืข ืคึฟืื ืื GStreamer 1.28.2 ืืืืืืืขืืืึท ืคืจืืืืืืขืจืง, ืืขื ืขื 11 ืฉืืืึทืืงืืืื ืืืืขื ืืืคึฟืืฆืืจื ืืขืืืึธืจื, ืืจืื ืคึฟืื ืืืขืืืข ืืขื ืขื ืคึฟืึทืจืืืจืืึทืื ืืืจื ืืึทืคึฟืขืจ ืึธืืืืขืจืคึฟืืึธืืก ืืื ืงืขื ืขื ืคึผืึธืืขื ืฆืืขื ืคึฟืืจื ืฆื ืงืึธื ืขืงืกืขืงืืืืึธื ืืืขื ืืขื ืคึผืจืึทืกืขืกื ืกืคึผืขืฆืืขื ืืขืืึทืืืข MKV (CVE ื ืืฉื ืึทืกืืื ื) ืืื MOV/MP4 (CVE-2026-5056) ืืืืืืืขืืืึท ืงืึทื ืืืื ืขืจืก, ืืื ืืืื H.266/VVC ืกืืจืืืก (CVE ื ืืฉื ืึทืกืืื ื). ืื ืืืืขืจืืงืข ืึทืื ืฉืืืึทืืงืืืื ืืขื ืขื ืคึฟืึทืจืืืจืืึทืื ืืืจื ืืื ืืขืืืฉืขืจ ืึธืืืืขืจืคึฟืืึธืืก ืึธืืขืจ NULL ืคึผืืื ืืขืจ ืืขืจืขืคึฟืขืจืขื ืฆื ืืื ืงืขื ืขื ืคึฟืืจื ืฆื ืืขื ืืึทื ืืฃ ืกืขืจืืืืก ืึธืืขืจ ืืื ืคึฟืึธืจืืึทืฆืืข ืืืงืก ืืืขื ืืขื ืคึผืจืึทืกืขืกื WAV, JPEG2000, AV1, H.264, MOV, MP4, FLV, mDVDsub, ืืื SRT/WebVTT ืืึทืื. ืื ืืขืคึฟืึทืจ ืคึฟืื ืื ืฉืืืึทืืงืืืื ืืื GStreamer ืืืขืจื ืคึฟืึทืจืฉืืึทืจืงื ืืืจื ืืขื ืคึฟืึทืงื ืึทื ืขืก ืืืขืจื ืืขื ืืฆื ืืื GNOME ืฆื ืคึผืึทืจืืืจื ืืขืืึทืืึทืืึท ืืืขื ืืขื ืืื ืืขืงืกืืจื ืืืืืึธืืึทืืืฉ ื ืืืข ืืขืงืขืก, ื.ื. ืฆื ืึทืืึทืงืืจื, ืืื ืืขื ืื ืฆื ืืึทืื ืืึธืืื ืึท ืืขืงืข ืืื ืืขื ืืื ืืขืงืกืืจืื ืืืจืขืงืืึธืจื ~/Downloads.
- ะ ืกืขืจืืืืจืขืจ ะฟะตัะฐัะธ CUPS ะฒััะฒะปะตะฝะพ 8 ััะทะฒะธะผะพััะตะน, ะดะฒะต ะธะท ะบะพัะพััั (CVE-2026-34980, CVE-2026-34990) ะผะพะณัั ะธัะฟะพะปัะทะพะฒะฐัััั ะดะปั ะพัะณะฐะฝะธะทะฐัะธะธ ัะดะฐะปัะฝะฝะพะณะพ ะฒัะฟะพะปะฝะตะฝะธั ัะฒะพะตะณะพ ะบะพะดะฐ ั ะฟัะฐะฒะฐะผะธ root ัะตัะตะท ะพัะฟัะฐะฒะบั ัะฟะตัะธะฐะปัะฝะพ ะพัะพัะผะปะตะฝะฝะพะณะพ ะทะฐะฟัะพัะฐ ะฝะฐ ัะตัะฒะตั ะฟะตัะฐัะธ. ะะตัะฒะฐั ััะทะฒะธะผะพััั ะฟะพะทะฒะพะปัะตั ะฝะตะฐััะตะฝัะธัะธัะธัะพะฒะฐะฝะฝะพะผั ะฐัะฐะบัััะตะผั ะดะพะฑะธัััั ะฒัะฟะพะปะฝะตะฝะธั ัะฒะพะตะณะพ ะบะพะดะฐ ั ะฟัะฐะฒะฐะผะธ ะฟะพะปัะทะพะฒะฐัะตะปั lp, ะพัะฟัะฐะฒะธะฒ ัะฟะตัะธะฐะปัะฝะพ ะพัะพัะผะปะตะฝะฝะพะต ะทะฐะดะฐะฝะธะต ะฒัะฒะพะดะฐ ะฝะฐ ะฟะตัะฐัั (ะฟัะพะฑะปะตะผะฐ ะฒัะทะฒะฐะฝะฐ ะฝะตะบะพััะตะบัะฝะพะน ะพะฑัะฐะฑะพัะบะพะน ัะบัะฐะฝะธัะพะฒะฐะฝะฝัั ัะธะผะฒะพะปะพะฒ ะฟะตัะตะฒะพะดะฐ ัััะพะบะธ). ะัะพัะฐั ััะทะฒะธะผะพััั ะฟะพะทะฒะพะปัะตั ะฟะพะดะฝััั ะฟัะธะฒะธะปะตะณะธะธ ั ะฟะพะปัะทะพะฒะฐัะตะปั lp ะดะพ root, ะดะพะฑะธะฒัะธัั ะธะทะผะตะฝะตะฝะธั ัะฐะนะปะพะฒ c ะฟัะฐะฒะฐะผะธ root ัะตัะตะท ะฟะพะดััะฐะฝะพะฒะบั ัะธะบัะธะฒะฝะพะณะพ ะฟัะธะฝัะตัะฐ. ะะฑะฝะพะฒะปะตะฝะธะต CUPS ั ััััะฐะฝะตะฝะธะตะผ ััะทะฒะธะผะพััะตะน ะฟะพะบะฐ ะฝะตะดะพัััะฟะฝะพ.
- ื ืคึผืึทืืฉ ืืขืืืื ื ืคืื ืืขืจ wolfSSL ืงืจืืคึผืืึธืืจืึทืคึฟืืฉืขืจ ืืืืืืึธืืขืง, ืืืขืจืกืืข 5.9.1, ืืื ืืจืืืกืืขืืขืื ืืขืืืึธืจื, ืืืึธืก ืคึฟืึทืจืจืืื 21 ืฉืืืึทืืงืืืื. ืืืื ืคึผืจืึธืืืขื ืืื ืืึทืฆืืืื ื ืืขืืืึธืจื ืืื ืงืจืืืืฉ, ืืื ื ืืื ืืขื ืขื ืืึทืฆืืืื ื ืืื ืืืื (ืืืึธืก ืคึฟืึทืจืืืจืืึทืื ืืึผืจืื ืงืึธืจืืคึผืฆืืข). ืื ืงืจืืืืฉืข ืฉืืืึทืืงืืื (CVE-2026-5194) ืืื ืคึฟืึทืจืืืจืืึทืื ืืืจื ืึท ืืึทื ืื ืืื ืืขืฉ ืืจืืืก ืืื OID ืืืึทืืืืึทืฆืืข. ืืึธืก ืืขืจืืขืืืขืื ืงืืขื ืขืจืข ืืขืฉืื ืฆื ืืืขืจื ืกืคึผืขืฆืืคึฟืืฆืืจื, ืืขืจืืื ืฉืืืึทืืขืจ ืื ืฉืืึทืจืงืืื ืคืื ืื ECDSA/ECC, DSA, ML-DSA, ED25519, ืืื ED448 ืืืืืืึทืืข ืืื ืืขืจืฉืจืืคึฟื ืึทืืืขืจืืืืขื ืืื ืืืืคึผืึทืกืื ื ืกืขืจืืืคึฟืืงืึทื-ืืึทืืืจืืข ืึธืืขื ืืึทืงืืืฉืึทื. ืื ืฉืืืึทืืงืืื ืืื ืึทื ืืืขืงื ืืขืืืึธืจื ืืืจื Anthropic ืืื ืืฉืขื ืืจื ืืขืช โโืึท ืงืึธื ืืืืขืจืืืืง ืืื ืึทื AI ืืึธืืขื.
- ืคึผืึทืืฉืื ื ืืืขืจืกืืขืก ืคืื ืืขืจ OpenSSL ืงืจืืคึผืืึธืืจืึทืคึฟืืฉืขืจ ืืืืืืึธืืขืง 3.6.2, 3.5.6, 3.4.5, ืืื 3.3.7 ืืขื ืขื ืืจืืืกืืขืืขืื ืืขืืืึธืจื, ืืืึธืก ืคึฟืึทืจืจืืืื ืืืื ืฉืืืึทืืงืืืื. ืื ืขืจื ืกืืกืืข ืฉืืืึทืืงืืื (CVE-2026-31790) ืงืขื ืคึฟืืจื ืฆื ืืขื ืืืง ืคึฟืื ืกืขื ืกืืืืืืข ืืึทืื ืืืึธืก ืืืืืื ืืื ืืขื ืืึทืคึฟืขืจ ื ืึธื ืึท ืคึฟืจืึดืขืจืืืงืขืจ ืึธืคึผืขืจืึทืฆืืข. ืื ืคึผืจืึธืืืขื ืืืขืจื ืคึฟืึทืจืืืจืืึทืื ืืืจื ืืขืจ ืืึทื ืืฅ ืคึฟืื ื ืืฉื-ืืื ืืฆืืึทืืืืืจืื ืืึผืจืื ืืืื ืคึฟืึทืจืคึผืึทืงื RSA KEM ืฉืืืกืืขื (RSASVE).
ื ืื ื ืฉืืืืืงืืื (CVE-2026-31789) ืืืขืจื ืืขืคึฟืืจื ืืืจื ื ืืึทืคึฟืขืจ ืืืืขืจืคึฟืืืก ืืื ืงืขื ืคึผืึธืืขื ืฆืืขื ืคึฟืืจื ืฆื ืงืึธื ืืืืกืคึฟืืจืื ื ืืืขื ืืขื ืืืจืืคึฟืืจื ืกืืจืื ื-ืฆื-ืืขืงืกืึทืืขืฆืืืึทื ืงืึธื ืืืขืจืกืืข ืึธืคึผืขืจืึทืฆืืขืก ืืืขื ืืขื ืคึผืจืึทืกืขืกืืจื ืกืคึผืขืฆืืขื ืืขืืึทืืืข X.509 ืกืขืจืืืคึฟืืงืึทืื. ืื ืคึผืจืึธืืืขื ืืืขืจื ืืึทืฆืืืื ื ืืื ืืื-ืึทืจืืืง ืืืืื ืขืก ืึทืคึฟืขืงืืืจื ื ืึธืจ 32-ืืื ืคึผืืึทืืคึฟืึธืจืืขืก. ืื ืืืืขืจืืงืข ืฉืืืืืงืืืื ืืืขืจื ืืขืคึฟืืจื ืืืจื ืืืืขื ืขื ืืึทืื ืคึฟืื ืึทื ืึทืจืืืก-ืคืื-ืืจืขื ืขืฆื ืืึทืคึฟืขืจ, ืฆืืืจืื ืฆื ืืึผืจืื ืืืึธืก ืืื ืฉืืื ืืึทืคึฟืจืฒึทื ืืขืืืึธืจื, ืืื ืืขืจืขืคึฟืขืจืขื ืกืื ื ืึท ื ืื ืคึผืืื ืืขืจ.
- ื ืงืจืืืืฉืข ืฉืืืืืงืืื (CVE-2026-32922) ืืื ื ืฉืืจืขื ืืงืืื ืจืืืข ืคืื โโ10 ืคืื 10 ืืื ืืขืืืืจื ืคืืจืจืืืื ืืื OpenClaw 2026.3.11, ืืขืจ OpenClaw AI ืืืขื ื ืืืืก ืขืจืืืืื AI ืืืืขืื ืฆื ืืื ืืขืจืืงืืืจื ืืื ืกืืกืืขื ืกืืืืืช (ืืืฉื, ืืืืคื ืืืืืืืืืก ืืื ืืจืืขืื ืืื ืืขืงืขืก). ืื ืฉืืืืืงืืื ืืืขืจื ืืขืคึฟืืจื ืืืจื ืืขื "/pairapprove" ืงืืืื ื ืืืืก ืืฉืขืงื ื ืืฉื ืจืืืืื ืื ืคืขืจืืืฉื ืก, ืืื ืขืจืืืืื ืืขืื ืืื ืืฆืขืจ ืืื ืคืขืจืื ื ืคืจืืืืืืขืืืขืก (ืื ื ืืืขืจืืืกืืข ืคืจืืืืืืขืืืข ืืขืืืขื ืืืืก ืืื ืคืืจืืื ืื ืฆื ืฆืืงืืืขื ืฆื OpenClaw) ืฆื ืืืืืืคืื ืืืืื ืืกืืจืืืืจ ืจืขืืื ืคืืจ ืืื ืืื ืืืงืืืขื ืคืืืฉืืขื ืืืืข ืงืื ืืจืื ืืืืขืจ ืืขืจ ืกืืืื. ืืื ืฆื ืืืจืืคืืจื ืื ืืืืงืข, ืคืืจืืื ืื ืืื ืคืฉืื ืฆื OpenClaw, ืืขื ืจืขืืืกืืจืืฆืืข ืคืื โโื ืืืื ืืขืืืืืก ืืื operator.admin ืฆืืืจืื, ืืื ืืขืจื ืื ืืืฉืืขืืืื ืืืืขืจ ืืืืืขื ืข ืคืืจืืื ื ืืืื "/pairapprove" ืงืืืื ื, ืืืงืืืขื ืืื ืคืืืฉืืขื ืืืืข ืงืื ืืจืื ืืืืขืจ ืืขืจ ืืขืฆืืืืขืจ OpenClaw ืืื ืกืืื ืฅ ืืื ืืืข ืคืืจืืื ืืขื ืข ืกืขืจืืืืกืขืก.
ื ืคืืจ ืืขื ืคืจืืขืจ, ืืื ื ืขื ืืืืข ืฉืืืืืงืืื (CVE-2026-33579) ืื ืืืขืงื ืืขืืืืจื ืืื OpenClaw, ืืืืก ืืื ืขืจืืืืื ืฆื ืืืืืืื ืฆืืืจืื ืงืื ืืจืืื ืืื ืืืงืืืขื ืืืืื ืืกืืจืืืืจ ืคืจืืืืืืขืืืขืก. ืื ืคืืจืฉืขืจ ืืืืก ืืืื ืื ืืืขืงื ืืขื ืคืจืืืืขื ืฆืืืืจื ืกืืืืืกืืืง ืืืืก ืืืืืื 135 ืขืคื ืืืขื ืฆืืืจืืืืขืืข OpenClaw ืืื ืกืืึทื ืฆื ืืืืฃ ืืขืจ ืืื ืืขืจื ืขืฅ, ืคืื ืืืขืืืข 63% ืขืจืืืืื ื ืืฉื-ืืืืืขื ืืืคืืฆืืจืืข ืคืืจืืื ืืื ืืขื.
- ื ืฉืืืืืงืืื (CVE-2026-39860) ืืื ืืืืขื ืืืคืืฆืืจื ืืขืืืืจื ืืื ืืขื ื ืืงืก ืคืขืงื ืืขื ืขืืืฉืขืจ ืืขื ืืฆื ืืื ืืขืจ ื ืืงืกืืก ืืืกืืจืืืืืฆืืข. ืขืก ืืื ืฆืืืขืืืืื ืืขืืืืจื ื ืงืจืืืืฉืข ืขืจื ืกืืงืืื ืืขืืืขื (9 ืคืื 10). ืื ืฉืืืืืงืืื ืขืจืืืืื ืืขืืข ืืขืงืข ืืื ืกืืกืืขื ืฆื ืืืขืจื ืืืืขืจืืขืฉืจืืื, ืืขืคืขื ืืื ื ืืืืฃ ืื ืคืขืจืืืฉื ืก ืคืื ืืขื ื ืืงืก ืืื ืืขืจืืจืื ื ืคืจืืฆืขืก, ืืืืก ืืืืคื ืืื ืจืื ืคืจืืืืืืขืืืขืก ืืื ื ืืงืกืืก ืืื ืืืืื-ืืืืขืจ ืืื ืกืืืืืฆืืขืก. ืื ืคืจืืืืขื ืืื ืืขืคึฟืืจื ืืขืืืืจื ืืืจื ืื ืืืืจืขืืืข ืคืืจืจืืืืื ื ืคืืจ ืืขืจ ืฉืืืืืงืืื CVE-2024-27297 ืืื 2024. ืืืืกื ืืฆื ืคืืกืืจื ืืืจื ืืขืจ ืกืืืกืืืืืฆืืข ืคืื โโื ืกืืืืืืืฉื ืืื ืง ืืื ื ืืืจืขืงืืืจื ืืื ืื ืืคืืขืืื ืืขืจืืขืจ ืืืื ืกืืืื ืืืื ืืขืจ ืืืื ืจืขืืืืืื ืืื ืืขืฉืจืืื ืืขืืืืจื. ืื ืฉืืืืืงืืื ืืื ืคืืจืจืืืื ืืขืืืืจื ืืื ื ืืงืก 2.34.5, 2.33.4, 2.32.7, 2.31.4, 2.30.4, 2.29.3, ืืื 2.28.6.
- ืคืื ืฃ ืฉืืืืืงืืืื ืืื ืืขื ืืื ืืงืก ืงืขืจื ืขื, ืืืืขื ืืืคืืฆืืจื ืืขืช ืขืงืกืคืขืจืืืขื ืื ืืืื ืงืืืื ืงืืื ืืืืงืื ืืื ืืืืก ืืืื ืืืืืื ืคืืืกื ืื nfsd, io_uring, futex, ืืื ksmbd ืกืืืกืืกืืขืืขื (1, 2), ืืขื ืขื ืคืืจืจืืืื ืืขืืืืจื. ืื ืฉืืืืืงืืื ืืื ืืขื NFS ืืจืืืืืขืจ ืขืจืืืืื ืงืขืจื ืขื ืืืจืื ืืื ืืืื ืฆื ืืืขืจื ืื ืืืขืงื ืืืจื ืฉืืงื ืคืืจืืื ืืขื ืฆื ืื NFS ืกืขืจืืืขืจ. ืื ืคืจืืืืขื ืืื ืืขืคืืจืฉืืคื ืืืจื ื ืืื ืืืืก ืืื ืคืืจืื ืืื ื ืงืขืจื ืขื 2.6.0 (2003).
ืืงืืจ: opennet.ru
