CLSA-2026-1768815310 mariadb: Fix of CVE-2025-13699

timezone-test-to-cet: change the timezone to CET to fix the test failure - CVE-2025-13699: fix directory traversal in mariadb-dump --tab by safely converting table and view names when generating output file paths...

GPAC dump_ttxt_sample function stack buffer overflow vulnerability

GPAC is an open source multimedia framework. GPAC has a stack buffer overflow vulnerability , the vulnerability stems from the dumpttxtsample function fails to correctly validate the length of the input data size , an attacker can use this vulnerability to cause a denial of service...

The vulnerability of the dump_ttxt_sample() function on the multimedia platform GPAC allows a hacker to trigger a service failure.

The vulnerability of the dumpttxtsample function on the GPAC multimedia platform is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

mariadb-devel:10.3 security update

An update is available for asio, galera, Judy, module.asio, mariadb. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list MariaDB is a multi-user, multi-threaded SQL...

RLSA-2026:0698 Important: mariadb-devel:10.3 security update

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. Security Fixes: mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation CVE-2025-13699 For more details about the security issues, including the impact...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004792)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004792 advisory. A NULL pointer dereference vulnerability was found in netlinkdump. This issue can occur when the Netlink socket receives the messagesendmsg for the XFRMMSGGETSA,...

RockyLinux 8 : mariadb-devel:10.3 (RLSA-2026:0698)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:0698 advisory. mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation CVE-2025-13699 Tenable has extracted the preceding...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004313)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004313 advisory. A NULL pointer dereference vulnerability was found in netlinkdump. This issue can occur when the Netlink socket receives the messagesendmsg for the XFRMMSGGETSA,...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004221)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004221 advisory. In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in ext4putsuper in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001231)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001231 advisory. In the flushtmregstothread function in arch/powerpc/kernel/ptrace.c in the Linux kernel before 4.13.5, a guest kernel crash can be triggered from unprivileged...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001237)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001237 advisory. The XFRM dump policy implementation in net/xfrm/xfrmuser.c in the Linux kernel before 4.13.11 allows local users to gain privileges or cause a denial of service...

MiracleLinux 4 : gimp-2.6.9-6.0.1.AXS4 (AXSA:2014-037:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-037:01 advisory. GIMP GNU Image Manipulation Program is a powerful image composition and editing program, which can be extremely useful for creating logos and other...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003894)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003894 advisory. In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in ext4putsuper in...

Alibaba Cloud Linux 3 : 0005: mariadb:10.5 (ALINUX3-SA-2026:0005)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0005 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-13699: MariaDB mariadb-dump Utility...

MiracleLinux 7 : kernel-3.10.0-862.2.3.el7 (AXSA:2018-3108:04)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2018-3108:04 advisory. Kernel: KVM: error in exception handling leads to wrong debug stack value CVE-2018-1087 Kernel: error in exception handling leads to DoS CVE-2018-88...

CVE-2025-70307

A stack overflow in the dumpttxtsample function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted packet...

mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation

A flaw was found in MariaDB. This vulnerability allows remote attackers to execute arbitrary code on affected installations via improper validation of a user-supplied path prior to using it in file operations in the mariadb-dump utility, requiring user interaction...

Important: Red Hat Security Advisory: mariadb-devel:10.3 security update

An update for the mariadb-devel:10.3 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

CVE-2025-65396

A vulnerability in the boot process of Blurams Flare Camera version 24.1114.151.929 and earlier allows a physically proximate attacker to hijack the boot mechanism and gain a bootloader shell via the UART interface. This is achieved by inducing a read error from the SPI flash memory during the...

CVE-2025-70307

The open-source multimedia framework GPAC v2.4.0 is vulnerable to a stack buffer overflow within the dump_ttxt_sample function. The root cause is a failure to correctly validate the length of the input data size, which can lead to memory operations outside the buffer. An attacker can exploit this...