Azure Linux 3.0 Security Update: kernel (CVE-2024-46784)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46784 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix error handling in...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37878)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37878 advisory. - In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix WARNON!ctx in freeevent f...

Azure Linux 3.0 Security Update: kernel (CVE-2024-47715)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47715 advisory. - In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: fix oops on non- dbd...

Azure Linux 3.0 Security Update: kernel (CVE-2024-49874)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49874 advisory. - In the Linux kernel, the following vulnerability has been resolved: i3c: master: svc: Fix use after free...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56635)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56635 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: avoid potential UAF in...

Azure Linux 3.0 Security Update: kernel (CVE-2024-50012)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50012 advisory. - In the Linux kernel, the following vulnerability has been resolved: cpufreq: Avoid a bad reference count on...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38326)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38326 advisory. - In the Linux kernel, the following vulnerability has been resolved: aoe: clean device rqlist in aoedevdownde...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38220)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38220 advisory. - In the Linux kernel, the following vulnerability has been resolved: ext4: only dirty folios when data...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37864)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37864 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: dsa: clean up FDB, MDB, VLAN entrie...

Azure Linux 3.0 Security Update: kernel (CVE-2025-22005)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22005 advisory. - In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix memleak of nhcpcpurthoutput in...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37980)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37980 advisory. - In the Linux kernel, the following vulnerability has been resolved: block: fix resource leak in...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37849)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37849 advisory. - In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Tear down vGIC on failed vCP...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38225)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38225 advisory. - In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Cleanup after an...

MAL-2026-431 Malicious code in testpkg-yilider690 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b24877bbf4fcd353c066c4597f200a64f940b5f419e09fd932be5add60e2ed95 The package testpkg-yilider690 was found to contain malicious code. Source: ghsa-malware...

Malicious code in sign-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e300b5f52fc165080a7c0a9eee170ee453c31a0419dc65e004a64b0749b699cf The package sign-client was found to contain malicious code. Source: ghsa-malware d46bf80205dc64dc9e6d65d1208f0b6e1a978d8dfdd555fbb2c9eb31805df69c An...

ImageMagick has a Memory Leak in LoadOpenCLDeviceBenchmark() when parsing malformed XML

Summary A memory leak vulnerability exists in the LoadOpenCLDeviceBenchmark function in MagickCore/opencl.c. When parsing a malformed OpenCL device profile XML file that contains closing tags, the function fails to release allocated memory for string members platformname, vendorname, name, versio...

golang security update

1.25.5-2 - Rebase to rhel-9-main - Related: RHEL-139366 1.25.5-1 - Update to Go 1.25.5 fips-1 - Resolves: RHEL-139366 1.25.3-2 - Cleanup lib/ ownership...

Docmost security vulnerabilities

Docmost is an open-source collaborative wiki and documentation software developed by Docmost. Versions of Docmost 0.23.2 and earlier contained security vulnerabilities. These vulnerabilities stemmed from the lack of cleanup during the rendering of Mermaid code blocks, which could lead to...

Oracle Linux 9 : golang (ELSA-2026-0923)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-0923 advisory. 1.25.5-2 - Rebase to rhel-9-main - Related: RHEL-139366 1.25.5-1 - Update to Go 1.25.5 fips-1 - Resolves: RHEL-139366 1.25.3-2 - Cleanup lib/ ownership Tenable...

MAL-2026-373 Malicious code in webmd-debug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5693e1af021faa1bcf410e9bdf757b9deebbae4505daa969275ef365e719227 The package webmd-debug was found to contain malicious code. Source: ghsa-malware b74e0fa5da459a8e2a346f0ad74dcf61ebdf972a7840b7f61292e46ea5aa58db An...