Linux Distros Unpatched Vulnerability : CVE-2024-56657

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ALSA: control: Avoid WARN for symlink errors Using WARN for showing the error of symlink...

Linux Distros Unpatched Vulnerability : CVE-2023-45666

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - stbimage is a single file MIT licensed library for processing images. It may look like stbiloadgifmain doesn't give guarantees about the content of output value...

Linux Distros Unpatched Vulnerability : CVE-2025-21723

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: mpi3mr: Fix possible crash when setting up bsg fails If bsgsetupqueue fails, the bsgqueue is assigned a non-NULL value. Consequently, in mpi3mrbsgexit, th...

Linux Distros Unpatched Vulnerability : CVE-2025-21807

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: block: fix queue freeze vs limits lock order in sysfs store methods queueattrstore always...

OPENSUSE-SU-2025:14859-1 ruby3.4-rubygem-rack-2.2-2.2.12-1.1 on GA media

These are all security issues fixed in the ruby3.4-rubygem-rack-2.2-2.2.12-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14856-1 go1.24-1.24.1-1.1 on GA media

These are all security issues fixed in the go1.24-1.24.1-1.1 package on the GA media of openSUSE Tumbleweed...

Linux Distros Unpatched Vulnerability : CVE-2024-49913

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Add null check for toppipetoprogram in commitplanesforstream This commit addresses a null pointer dereference issue in the commitplanesforstrea...

OPENSUSE-SU-2025:14857-1 grype-0.88.0-1.1 on GA media

These are all security issues fixed in the grype-0.88.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14860-1 xen-4.20.0_08-4.1 on GA media

These are all security issues fixed in the xen-4.20.008-4.1 package on the GA media of openSUSE Tumbleweed...

PT-2025-20534

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns the handling of isochronous Ring Underrun/Overrun events in the Linux kernel's xHCI Extensible Host Controller Interface implementation. Specifically, when such an eve...

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: Use-after-free in WebTransportChild CVE-2025-1931 firefox: AudioIPC StreamData could trigger a use-after-free in the Browser process CVE-2025-1930 firefox:...

Ubuntu 20.04 LTS : Firefox vulnerabilities (USN-7334-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7334-1 advisory. Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially explo...

Linux Distros Unpatched Vulnerability : CVE-2024-8906

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect security UI in Downloads in Google Chrome prior to 129.0.6668.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to...

Linux Distros Unpatched Vulnerability : CVE-2025-21781

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batman-adv: fix panic during interface removal Reference counting is used to ensure that batadvhardifneighnode and batadvhardiface are not freed before/during...

Linux Distros Unpatched Vulnerability : CVE-2024-56775

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Fix handling of plane refcount Why The mechanism to backup and restore plane states doesn't maintain refcount, which can cause issues if the...

Linux Distros Unpatched Vulnerability : CVE-2025-21806

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: let net.core.devweight always be non-zero The following problem was encountered during stability test: NULL netdevice: NAPI poll function...

Linux Distros Unpatched Vulnerability : CVE-2025-0686

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in grub2. When performing a symlink lookup from a romfs filesystem, grub's romfs filesystem module uses user-controlled parameters from the...

Linux Distros Unpatched Vulnerability : CVE-2024-50074

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: parport: Proper fix for array out-of- bounds access The recent fix for array out-of-bounds...

RHEL 8 : redis:6 (RHSA-2025:0595)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:0595 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets...

Linux Distros Unpatched Vulnerability : CVE-2024-56532

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: us122l: Use sndcardfreewhenclosed at disconnection The USB disconnect callback is supposed to be short and not too-long waiting. OTOH, the current code us...