Storaged libblockdev security vulnerability

Storaged libblockdev is a Storaged open source library for manipulating block devices. A security vulnerability exists in Storaged libblockdev that stems from interacting with the udisks daemon in an improper manner, which could lead to local elevation of privilege...

Clam AntiVirus Toolkit 1.4.3

Clam AntiVirus is an anti-virus toolkit for Unix. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command-line scanner, and a tool for automatic updating via Internet. The programs ar...

[SECURITY] [DLA 4221-1] libblockdev security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4221-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz June 17, 2025 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5943-1] libblockdev security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5943-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 17, 2025 https://www.debian.org/security/faq -...

Qualys TRU Uncovers Chained LPE: SUSE 15 PAM to Full Root via libblockdev/udisks

The Qualys Threat Research Unit TRU has discovered two linked local privilege escalation LPE flaws. The first CVE-2025-6018 resides in the PAM configuration of openSUSE Leap 15 and SUSE Linux Enterprise 15. Using this vulnerability, an unprivileged local attacker—for example, via SSH—can elevate ...

Demon Routing Protocol Daemon RCE

The vulnerability of the Demon Routing Protocol Daemon RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to insufficient handling of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Debian dsa-5943 : gir1.2-blockdev-2.0 - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5943 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5943-1 [email protected] https://www.debian.org/security/...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: nfsd: fixed the management of listener transports Currently, when no active threads are running, a root user using the nfsdctl command can attempt to remove a particular listener from the list of previously added listeners. By...

TencentOS Server 3: rsync (TSSA-2025:0042)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0042 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

TencentOS Server 2: rsync (TSSA-2025:0101)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0101 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

Exploit for CVE-2026-36848

CVE-2026-36848 A critical path traversal vulnerability was id...

Fortinet FortiOS Out-of-Bounds Read Vulnerability

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. An out-of-bounds read vulnerabili...

Fortinet Fortigate Weak authentication in security fabric daemon (FG-IR-24-058)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-058 advisory. - A channel accessible by non-endpoint vulnerability CWE-300 in Fortinet FortiOS version 7.4.0 through 7.4.3, 7.2.0 through...

Stash ws.stash.app.mac.daemon.helper security vulnerability

Stash ws.stash.app.mac.daemon.helper is a system agent component for macOS by Stash. A security vulnerability exists in Stash ws.stash.app.mac.daemon.helper, which stems from an incorrect use of the macOS authorization model, and could allow an unauthorized client to invoke privileged operations...

Security update for docker

This update for docker fixes the following issues: Always clear SUSEConnect suse secrets when starting containers regardless of whether the daemon was built with SUSEConnect support. Not doing this causes containers from SUSEConnect-enabled daemons to fail to start when running with...

CLSA-2025-1748967240 sssd: Fix of CVE-2023-3758

CVE-2023-3758: fix race condition in adgpo...

CLSA-2025-1748947069 sssd: Fix of CVE-2023-3758

CVE-2023-3758: fix race condition in adgpo...

CLSA-2025-1748945377 sssd: Fix of CVE-2023-3758

CVE-2023-3758: fix race condition in adgpo...

[SECURITY] Fedora 41 Update: systemd-256.15-1.fc41

systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses sock et and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups,...

[SECURITY] Fedora 42 Update: systemd-257.6-1.fc42

systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses sock et and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups,...