PT-2026-4287

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description Gitea does not correctly validate the repository context during attachment deletion. A user who uploaded an attachment to a repository might be able to delete it even after losing access to tha...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56635)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56635 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: avoid potential UAF in...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21667)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21667 advisory. - In the Linux kernel, the following vulnerability has been resolved: iomap: avoid avoid truncating 64-bit...

SUSE SLES12: libecpg6 / libecpg6-32bit / libpq5 / libpq5-32bit / postgresql / etc (SUSE-SU-2026:0197-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0197-1 advisory. Changes in postgresql18: - Fix build with uring for post SLE15 code streams. Update to 18.1: https://www.postgresql.org/about/news/p-3171/...

Azure Linux 3.0 Security Update: librsvg2 (CVE-2022-24713)

The version of librsvg2 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-24713 advisory. - regex is an implementation of regular expressions for the Rust language. The regex crate features built-in...

Azure Linux 3.0 Security Update: librsvg2 (CVE-2022-23639)

The version of librsvg2 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-23639 advisory. - crossbeam-utils provides atomics, synchronization primitives, scoped threads, and other utilities for...

PT-2026-3887

SumatraPDF is a multi-format reader for Windows. All versions contain an off-by-one error in the validation code that only triggers with exactly 2 records, causing an integer underflow in the size calculation. This bug exists in PalmDbReader::GetRecord when opening a crafted Mobi file, resulting ...

Azure Linux 3.0 Security Update: kernel (CVE-2024-39496)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-39496 advisory. - In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix use-after-free due to...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21862)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21862 advisory. - In the Linux kernel, the following vulnerability has been resolved: dropmonitor: fix incorrect initializatio...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21790)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21790 advisory. - In the Linux kernel, the following vulnerability has been resolved: vxlan: check vxlanvnigroupinit return...

Azure Linux 3.0 Security Update: kernel (CVE-2025-23145)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-23145 advisory. - In the Linux kernel, the following vulnerability has been resolved: mptcp: fix NULL pointer in...

Azure Linux 3.0 Security Update: kernel (CVE-2024-58005)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-58005 advisory. - In the Linux kernel, the following vulnerability has been resolved: tpm: Change to kvalloc in eventlog/acpi....

Azure Linux 3.0 Security Update: kernel (CVE-2025-38194)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38194 advisory. - In the Linux kernel, the following vulnerability has been resolved: jffs2: check that raw node were...

Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2025-58063)

The version of CBL-Mariner Releases installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-58063 advisory. - CoreDNS is a DNS server that chains plugins. Starting in version 1.2.0 and prior to version...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38185)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38185 advisory. - In the Linux kernel, the following vulnerability has been resolved: atm: atmtcp: Free invalid length skb in...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-35849)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-35849 advisory. - In the Linux kernel, the following vulnerability has been resolved: btrfs: fix information leak in...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38066)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38066 advisory. - In the Linux kernel, the following vulnerability has been resolved: dm cache: prevent BUGON by blocking...

Azure Linux 3.0 Security Update: kernel (CVE-2024-26596)

"The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26596 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: dsa: fix netdevpriv dereference...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38263)

"The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38263 advisory. - In the Linux kernel, the following vulnerability has been resolved: bcache: fix NULL pointer in cachesetflu...

Azure Linux 3.0 Security Update: kernel (CVE-2024-49989)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49989 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix double free issue...