Azure Linux 3.0 Security Update: kernel (CVE-2024-49894)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49894 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds...

Azure Linux 3.0 Security Update: cert-manager / cf-cli / docker-buildx / erlang / kubernetes / kubevirt (CVE-2023-48795)

The version of cert-manager / cf-cli / docker-buildx / erlang / kubernetes / kubevirt installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-48795 advisory. - The SSH transport protocol with certain...

Azure Linux 3.0 Security Update: kernel (CVE-2024-46750)

"The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46750 advisory. - In the Linux kernel, the following vulnerability has been resolved: PCI: Add missing bridge lock to...

Azure Linux 3.0 Security Update: pytorch (CVE-2024-27319)

The version of pytorch installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27319 advisory. - Versions of the package onnx before and including 1.15.0 are vulnerable to Out-of-bounds Read as the...

Azure Linux 3.0 Security Update: qemu / qemu-kvm (CVE-2021-3750)

The version of qemu / qemu-kvm installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-3750 advisory. - A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU. EHCI does not verify ...

Azure Linux 3.0 Security Update: kernel (CVE-2024-36902)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-36902 advisory. - In the Linux kernel, the following vulnerability has been resolved: ipv6: fib6rules: avoid possible NULL...

Azure Linux 3.0 Security Update: nodejs / nodejs18 / reaper (CVE-2024-28863)

The version of nodejs / nodejs18 / reaper installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-28863 advisory. - node-tar is a Tar for Node.js. node-tar prior to version 6.2.1 has no limit on the numbe...

Azure Linux 3.0 Security Update: kernel (CVE-2024-49879)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49879 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm: omapdrm: Add missing check for...

Azure Linux 3.0 Security Update: kernel (CVE-2024-42284)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42284 advisory. - In the Linux kernel, the following vulnerability has been resolved: tipc: Return non-zero value from...

Azure Linux 3.0 Security Update: python-pygments (CVE-2021-20270)

The version of python-pygments installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-20270 advisory. - An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 May lead to denial of service when...

Azure Linux 3.0 Security Update: mysql (CVE-2024-21196)

The version of mysql installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-21196 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: X Plugin. Supported versions tha...

Azure Linux 3.0 Security Update: kernel (CVE-2024-47749)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47749 advisory. - In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Added NULL check for...

Azure Linux 3.0 Security Update: kernel (CVE-2024-39476)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-39476 advisory. - In the Linux kernel, the following vulnerability has been resolved: md/raid5: fix deadlock that raid5d wait...

Azure Linux 3.0 Security Update: grub2 (CVE-2022-2601)

The version of grub2 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-2601 advisory. - A buffer overflow was found in grubfontconstructglyph. A malicious crafted pf2 font can lead to an overflow wh...

Azure Linux 3.0 Security Update: fluent-bit (CVE-2024-26455)

The version of fluent-bit installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26455 advisory. - fluent-bit 2.2.2 contains a Use-After-Free vulnerability in /fluent-...

Azure Linux 3.0 Security Update: kernel (CVE-2024-50015)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50015 advisory. - In the Linux kernel, the following vulnerability has been resolved: ext4: dax: fix overflowing extents beyon...

Azure Linux 3.0 Security Update: kernel (CVE-2024-42077)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42077 advisory. - In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix DIO failure due to insufficie...

Azure Linux 3.0 Security Update: kata-containers / rpm-ostree (CVE-2023-26964)

The version of kata-containers / rpm-ostree installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-26964 advisory. - An issue was discovered in hyper v0.13.7. h2-0.2.4 Stream stacking occurs when the H2...

Azure Linux 3.0 Security Update: golang / msft-golang (CVE-2023-29402)

The version of golang / msft-golang installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-29402 advisory. - The go command May generate unexpected code at build time when using cgo. This May result in...

Azure Linux 3.0 Security Update: kernel (CVE-2024-50041)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50041 advisory. - In the Linux kernel, the following vulnerability has been resolved: i40e: Fix macvlan leak by synchronizing...