CBL Mariner 2.0 Security Update: nbdkit (CVE-2025-47712)

The version of nbdkit installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-47712 advisory. - A flaw exists in the nbdkit blocksize filter that can be triggered by a specific type of client request. Whe...

CBL Mariner 2.0 Security Update: ansible (CVE-2024-9902)

The version of ansible installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-9902 advisory. - A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create ...

CBL Mariner 2.0 Security Update: yasm (CVE-2023-37732)

The version of yasm installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-37732 advisory. - Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows t...

CBL Mariner 2.0 Security Update: cloud-init (CVE-2024-11584)

The version of cloud-init installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-11584 advisory. - cloud-init through 25.1.2 includes the systemd socket unit cloud-init-hotplugd.socket with default...

CBL Mariner 2.0 Security Update: binutils (CVE-2025-5244)

The version of binutils installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-5244 advisory. - A vulnerability was found in GNU Binutils up to 2.44. It has been rated as critical. Affected by this issue...

CBL Mariner 2.0 Security Update: libsoup (CVE-2025-32909)

The version of libsoup installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32909 advisory. - A flaw was found in libsoup. SoupContentSniffer May be vulnerable to a NULL pointer dereference in the...

CBL Mariner 2.0 Security Update: curl / mysql (CVE-2025-0665)

The version of curl / mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-0665 advisory. - libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channe...

CBL Mariner 2.0 Security Update: libxml2 (CVE-2025-32414)

The version of libxml2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32414 advisory. - In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API...

CBL Mariner 2.0 Security Update: reaper (CVE-2025-48387)

The version of reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-48387 advisory. - tar-fs provides filesystem bindings for tar-stream. Versions prior to 3.0.9, 2.1.3, and 1.16.5 have an issue...

CBL Mariner 2.0 Security Update: glibc (CVE-2023-4806)

The version of glibc installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-4806 advisory. - A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function May access memor...

Apache Commons Lang 安全漏洞

Apache Commons Lang is a tool library of the Apache USA Foundation. A security vulnerability exists in Apache Commons Lang versions 2.0 through 2.6 and 3.0 through versions prior to 3.18.0, which stems from the presence of infinite recursion in the ClassUtils.getClass method, which could lead to ...

CBL Mariner 2.0 Security Update: CBL-Mariner Releases / grub2 (CVE-2020-14310)

The version of CBL-Mariner Releases / grub2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-14310 advisory. - There is an issue on grub2 before version 2.06 at function readsectionasstring. It...

CBL Mariner 2.0 Security Update: ansible (CVE-2023-5115)

The version of ansible installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-5115 advisory. - An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to...

CBL Mariner 2.0 Security Update: nodejs / nodejs18 (CVE-2025-47279)

The version of nodejs / nodejs18 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-47279 advisory. - Undici is an HTTP/1.1 client for Node.js. Prior to versions 5.29.0, 6.21.2, and 7.5.0, applicatio...

CBL Mariner 2.0 Security Update: sudo (CVE-2025-32463)

The version of sudo installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32463 advisory. - Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user- controll...

CBL Mariner 2.0 Security Update: azl-compliance / rust (CVE-2025-4574)

The version of azl-compliance / rust installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-4574 advisory. - In crossbeam-channel rust crate, the internal Channel type's Drop method has a race condition...

CBL Mariner 2.0 Security Update: clamav (CVE-2025-20260)

The version of clamav installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-20260 advisory. - A vulnerability in the PDF scanning processes of ClamAV could allow an unauthenticated, remote attacker to...

CBL Mariner 2.0 Security Update: golang (CVE-2025-25199)

The version of golang installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-25199 advisory. - go-crypto-winnative Go crypto backend for Windows using Cryptography API: Next Generation CNG. Prior to comm...

CBL Mariner 2.0 Security Update: libsoup (CVE-2025-32907)

The version of libsoup installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32907 advisory. - A flaw was found in libsoup. The implementation of HTTP range requests is vulnerable to a resource...

CBL Mariner 2.0 Security Update: binutils (CVE-2025-5245)

The version of binutils installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-5245 advisory. - A vulnerability classified as critical has been found in GNU Binutils up to 2.44. This affects the function...