Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004839)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004839 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/msm/mdp5: Fix global state lock backoff We need to grab the lock after the early return for...

CVE-2026-20897

Gitea does not properly validate repository ownership when deleting Git LFS locks. A user with write access to one repository may be able to delete LFS locks belonging to other repositories...

CVE-2026-20897 Gitea Git LFS Lock Deletion Broken Access Control (Cross-Repo IDOR)

Gitea does not properly validate repository ownership when deleting Git LFS locks. A user with write access to one repository may be able to delete LFS locks belonging to other repositories...

CVE-2026-20897

Gitea does not properly validate repository ownership when deleting Git LFS locks. A user with write access to one repository may be able to delete LFS locks belonging to other repositories...

CVE-2026-20897 Gitea Git LFS Lock Deletion Broken Access Control (Cross-Repo IDOR)

Gitea does not properly validate repository ownership when deleting Git LFS locks. A user with write access to one repository may be able to delete LFS locks belonging to other repositories...

CVE-2026-20897 Gitea Git LFS Lock Deletion Broken Access Control (Cross-Repo IDOR)

Gitea does not properly validate repository ownership when deleting Git LFS locks. A user with write access to one repository may be able to delete LFS locks belonging to other repositories...

Security update for python-filelock

This update for python-filelock fixes the following issues: CVE-2025-68146: TOCTOU race condition may allow local attackers to corrupt or truncate arbitrary user files bsc1255244. CVE-2026-22701: TOCTOU race condition in the SoftFileLock implementation bsc1256457. Patch Instructions: To install...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21931)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21931 advisory. - In the Linux kernel, the following vulnerability has been resolved: hwpoison, memoryhotplug: lock folio befo...

Azure Linux 3.0 Security Update: kernel (CVE-2025-23161)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-23161 advisory. - In the Linux kernel, the following vulnerability has been resolved: PCI: vmd: Make vmddev::cfglock a...

Azure Linux 3.0 Security Update: kernel (CVE-2025-23163)

"The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-23163 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: vlan: don't propagate flags on ope...

Azure Linux 3.0 Security Update: kernel (CVE-2024-49976)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49976 advisory. - In the Linux kernel, the following vulnerability has been resolved: tracing/timerlat: Drop interfacelock in...

Gitea security vulnerabilities

Gitea is a lightweight Git service developed using Go language in the Gitea community. Gitea has a security vulnerability that stems from the improper verification of repository ownership when deleting the Git LFS lock. This vulnerability could allow a user with write permissions to a repository ...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21945)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21945 advisory. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb2lock If...

Azure Linux 3.0 Security Update: kernel (CVE-2024-42067)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42067 advisory. - In the Linux kernel, the following vulnerability has been resolved: bpf: Take return from setmemoryrox into...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37967)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37967 advisory. - In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: displayport: Fix...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37741)

"The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37741 advisory. - In the Linux kernel, the following vulnerability has been resolved: jfs: Prevent copying of nlink with valu...

Azure Linux 3.0 Security Update: kernel (CVE-2024-46678)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46678 advisory. - In the Linux kernel, the following vulnerability has been resolved: bonding: change ipseclock from spin lock...

Azure Linux 3.0 Security Update: kernel (CVE-2024-41049)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-41049 advisory. - In the Linux kernel, the following vulnerability has been resolved: filelock: fix potential use-after-free i...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37921)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37921 advisory. - In the Linux kernel, the following vulnerability has been resolved: vxlan: vnifilter: Fix unlocked deletion ...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38087)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38087 advisory. - In the Linux kernel, the following vulnerability has been resolved: net/sched: fix use-after-free in...