GO-2025-4004 Canonical LXD Arbitrary File Read via Template Injection in Snapshot Patterns in github.com/lxc/lxd

Canonical LXD Arbitrary File Read via Template Injection in Snapshot Patterns in github.com/lxc/lxd...

GO-2025-4002 Canonical LXD Project Existence Determination Through Error Handling in Image Export Function in github.com/canonical/lxd

Canonical LXD Project Existence Determination Through Error Handling in Image Export Function in github.com/canonical/lxd...

RHSA-2025:19610 Red Hat Security Advisory: sssd security update

Bulletin has no description...

RLSA-2025:19610 Important: sssd security update

The System Security Services Daemon SSSD service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch NSS and the Pluggable Authentication Modules PAM interfaces toward the system, and a pluggable back-end system ...

sssd security update

An update is available for sssd. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The System Security Services Daemon SSSD service provides a set of daemons to...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990001)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990001 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: prevent integer overflow on 32 bit systems On a 32 bit system, the len sizeofp operation ca...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989150)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989150 advisory. In the Linux kernel, the following vulnerability has been resolved: audit: improve robustness of the audit queue handling If the audit daemon were ever to get stuck ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989608)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989608 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix iasize underflow iattr::iasize is a lofft, which is a signed 64-bit type. NFSv3 and NFS...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990287)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990287 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent a potential integer overflow If the tag length is = U32MAX - 3 then the length + 4...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990363)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990363 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfs4openowner leak when concurrent nfsd4open occur The action force umountumount -f wil...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-990350)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990350 advisory. In the Linux kernel, the following vulnerability has been resolved: net: nfc: Fix use-after-free in localcleanup Fix a use-after-free that occurs in kfreeskb called...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989690)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989690 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: fix use-after-free due to delegation race A delegation break could arrive as soon as we've...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989814)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989814 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix nsfd startup race again Commit bd5ae9288d64 nfsd: register pernet ops last, unregister...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-990200)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990200 advisory. In the Linux kernel, the following vulnerability has been resolved: cifs: Fix oops due to uncleared server-smbdconn in reconnect In smbddestroy, clear the...

RockyLinux 8 : sssd (RLSA-2025:19610)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:19610 advisory. sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems CVE-2025-11561 Tenable has extracted the preceding description...

Important: Red Hat Security Advisory: sssd security update

An update for sssd is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Fedora: Security Advisory (FEDORA-2025-5f49ddd4af)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ksmbd: prevent connection release during oplock break notification

...

Astra Linux – Vulnerability in udisks2

A flaw was discovered in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is accomplished through the loop device handler, which processes requests sent through the D-BUS interface. As part of this handler’s functionality, it receives a lis...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: smb: client: fixed a potential deadlock that could occur when reconnecting channels. Fixed the function cifssignalcifsdforreconnect to follow the correct lock order and prevent the following deadlock from occurring:...