Mageia: Security Advisory (MGASA-2025-0333)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992465)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992465 advisory. In the Linux kernel, the following vulnerability has been resolved: ceph: don't leak snaprwsem in handlecapgrant When handlecapgrant is called on an IMPORT op, then...

Linux Distros Unpatched Vulnerability : CVE-2025-40362

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ceph: fix multifs mds auth caps issue The mds auth caps check should also validate the fsname along with the associated caps. Not doing so would result in...

CVE-2024-47866 affecting package ceph for versions less than 18.2.2-12

CVE-2024-47866 affecting package ceph for versions less than 18.2.2-12. A patched version of the package is available...

Linux Distros Unpatched Vulnerability : CVE-2024-47866

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument x-amz-copy-source to put an object an...

AZL-70058 CVE-2024-47866 affecting package ceph for versions less than 18.2.2-12

Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument x-amz-copy-source to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no...

NewStart CGSL MAIN 7.02 : ceph Vulnerability (NS-SA-2025-0247)

The remote NewStart CGSL host, running version MAIN 7.02, has ceph packages installed that are affected by a vulnerability: - A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root in the form of a crash dump, and dump privileged...

CVE-2025-9648 affecting package ceph for versions less than 16.2.10-10

CVE-2025-9648 affecting package ceph for versions less than 16.2.10-10. A patched version of the package is available...

CVE-2025-9648 affecting package ceph for versions less than 18.2.2-11

CVE-2025-9648 affecting package ceph for versions less than 18.2.2-11. A patched version of the package is available...

EUVD-2014-6297

Malware in sbrugna...

EUVD-2018-18998

Malware in sbrugna...

EUVD-2018-8677

Malware in sbrugna...

EUVD-2017-7993

Malware in sbrugna...

EUVD-2020-3160

Malware in sbrugna...

EUVD-2014-6296

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2025-39927

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ceph: fix race condition validating rparent before applying state Add validation to ensure the cached parent directory inode matches the directory info in MDS...

EUVD-2025-25542

Malicious code in bioql PyPI...

EUVD-2022-54479

Malicious code in bioql PyPI...

EUVD-2025-20033

Malicious code in bioql PyPI...

PT-2026-37613

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The ceph zero partial object function lacks the proper snapshot context for its OSD write operations. This deficiency can result in data inconsistencies within snapshots. Recommendations...