Azure Linux 3.0 Security Update: valkey (CVE-2025-49112)

The version of valkey installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-49112 advisory. - setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev-size - prev-used...

Azure Linux 3.0 Security Update: samba (CVE-2020-25722)

The version of samba installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-25722 advisory. - Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. ...

Azure Linux 3.0 Security Update: python-tensorboard (CVE-2019-16276)

The version of python-tensorboard installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2019-16276 advisory. - Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling. CVE-2019-16276 Note tha...

Azure Linux 3.0 Security Update: kernel (CVE-2024-49978)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49978 advisory. - In the Linux kernel, the following vulnerability has been resolved: gso: fix udp gso fraglist segmentation...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37755)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37755 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: libwx: handle pagepooldevallocpages...

Azure Linux 3.0 Security Update: libssh (CVE-2023-6004)

The version of libssh installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6004 advisory. - A flaw was found in libssh. By utilizing the ProxyCommand or ProxyJump feature, users can exploit unchecked...

Azure Linux 3.0 Security Update: kernel (CVE-2024-57834)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-57834 advisory. - In the Linux kernel, the following vulnerability has been resolved: media: vidtv: Fix a null-ptr-deref in...

Azure Linux 3.0 Security Update: kernel (CVE-2024-46693)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46693 advisory. - In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pmicglink: Fix race during...

Azure Linux 3.0 Security Update: kernel (CVE-2024-58010)

"The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-58010 advisory. - In the Linux kernel, the following vulnerability has been resolved: binfmtflat: Fix integer overflow bug on...

Azure Linux 3.0 Security Update: samba (CVE-2021-3671)

The version of samba installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-3671 advisory. - A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ Ticket...

Azure Linux 3.0 Security Update: cert-manager (CVE-2023-6337)

The version of cert-manager installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6337 advisory. - HashiCorp Vault and Vault Enterprise 1.12.0 and newer are vulnerable to a denial of service through...

Azure Linux 3.0 Security Update: kata-containers (CVE-2025-4432)

The version of kata-containers installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-4432 advisory. - A flaw was found in Rust's Ring package. A panic May be triggered when overflow checking is enabled...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37875)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37875 advisory. - In the Linux kernel, the following vulnerability has been resolved: igc: fix PTM cycle trigger logic Writing...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37830)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37830 advisory. - In the Linux kernel, the following vulnerability has been resolved: cpufreq: scmi: Fix null-ptr-deref in...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-27028)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27028 advisory. - In the Linux kernel, the following vulnerability has been resolved: spi: spi-mt65xx: Fix NULL pointe...

Toward greater transparency: Introducing machine-readable Vulnerability Exploitability Xchange (VEX) for Azure Linux and beyond

Microsoft is now publishing standard attestations about third-party CVEs through the Vulnerability Exploitability eXchange VEX standard including vulnerabilities in embedded open-source software in Microsoft products and services and starting with the Azure Linux Distribution formerly CBL-Mariner...

Azure Linux 3.0 Security Update: libsoup (CVE-2025-4948)

The version of libsoup installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-4948 advisory. - A flaw was found in the soupmultipartnewfrommessage function of the libsoup HTTP library, which is commonly...

Azure Linux 3.0 Security Update: httpd (CVE-2025-54090)

The version of httpd installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-54090 advisory. - A bug in Apache HTTP Server 2.4.64 results in all RewriteCond expr ... tests evaluating as true. Users are...

Azure Linux 3.0 Security Update: xorg-x11-server / xorg-x11-server-Xwayland (CVE-2025-49179)

The version of xorg-x11-server / xorg-x11-server-Xwayland installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-49179 advisory. - A flaw was found in the X Record extension. The...

Azure Linux 3.0 Security Update: xorg-x11-server / xorg-x11-server-Xwayland (CVE-2025-49175)

The version of xorg-x11-server / xorg-x11-server-Xwayland installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-49175 advisory. - A flaw was found in the X Rendering extension's handling of animated...