[SECURITY] Fedora 45 Update: libnbd-1.25.7-4.fc45

NBD =E2=80=94 Network Block Device =E2=80=94 is a protocol for accessing Bloc k Devices hard disks and disk-like things over a Network. This is the NBD client library in userspace, a simple library for writing NBD clients. The key features are: Synchronous and asynchronous APIs, both for ease of...

Astra Linux – Vulnerability in libnbd

A flaw was discovered in libnbd. A malicious actor could exploit this by convincing libnbd to open a specially crafted Uniform Resource Identifier URI. This vulnerability arises because non-standard hostnames starting with ‘-o’ are incorrectly interpreted as arguments for the Secure Shell SSH...

[SECURITY] Fedora 45 Update: libnbd-1.25.7-3.fc45

NBD =E2=80=94 Network Block Device =E2=80=94 is a protocol for accessing Bloc k Devices hard disks and disk-like things over a Network. This is the NBD client library in userspace, a simple library for writing NBD clients. The key features are: Synchronous and asynchronous APIs, both for ease of...

Rocky Linux 8.6 [CIQ] Security Update: libnbd / libnbd-bash-completion / libnbd-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0833)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260833 advisory. This advisory aggregates security fixes for the libnbd SRPM in CIQ LTS 8.6. It addresses 6 CVEs: CVE-2022-23645, CVE-2022-0897, CVE-2021-3507,...

Rocky Linux 9 [CIQ] Security Update: libnbd / libnbd-bash-completion / libnbd-debuginfo / etc (crlsa-2024_6757)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20246757 advisory. libnbd: NBD server improper certificate validation CVE-2024-7383 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note...

AlmaLinux 9.2 [TuxCare] Security Update: libnbd / libnbd-bash-completion / libnbd-devel / nbdfuse / etc (ALMALINUX9.2:CLSA-2025:1764772736)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1764772736 advisory. - A flaw was found in libnbd. The client did not always correctly verify the NBD server's certificate when using TLS to connect to an NBD...

Rocky Linux 9.2 [CIQ] Security Update: libnbd / libnbd-bash-completion / libnbd-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0445)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260445 advisory. This advisory aggregates security fixes for the libnbd SRPM in CIQ LTS 9.2. It addresses 4 CVEs: CVE-2024-7383, CVE-2019-14842, CVE-2021-20286,...

AlmaLinux 9.2 [TuxCare] Security Update: libnbd / libnbd-bash-completion / libnbd-devel / nbdfuse / etc (ALMALINUX9.2:CLSA-2026:1778007485)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778007485 advisory. - A flaw was found in libnbd. A server can reply with a block size larger than 2^63 the NBD spec states the size is a 64-bit unsigned value...

Rocky Linux 8 [CIQ] Security Update: hivex / hivex-debuginfo / hivex-debugsource / hivex-devel / etc Multiple Vulnerabilities (crlsa-2024_6964)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20246964 advisory. QEMU: virtio: DMA reentrancy issue leads to double free vulnerability CVE-2024-3446 QEMU: Denial of Service via Improper Synchronization in QEMU NBD Server...

Rocky Linux 8.6 [CIQ] Security Update: libnbd / libnbd-bash-completion / libnbd-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0079)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260079 advisory. This advisory aggregates security fixes for the libnbd SRPM in CIQ LTS 8.6. It addresses 5 CVEs: CVE-2024-3446, CVE-2024-7383, CVE-2024-7409,...

Fedora 43 : libnbd (2026-045e6f85c6)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-045e6f85c6 advisory. New upstream stable version 1.24.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

CLSA-2026-1778007485 libnbd: Fix of CVE-2023-5215

CVE-2023-5215: fix nbdgetsize returning negative value for sizes larger than INT64MAX...

virt:ol and virt-devel:ol security update

hivex 1.3.18-23 - Limit recursion in ri-records CVE-2021-3622 resolves: rhbz1976194 libguestfs 1.44.0-9.0.2 - libguestfs.spec: Add btrfs-progs RPM to appliance Orabug: 35634755 libguestfs-winsupport 8.10-1 - Rebase to ntfs-3g 2022.10.3 - Fixes: CVE-2022-40284 - resolves: rhbz2236373 libiscsi...

virt:ol and virt-devel:ol security and bug fix update

hivex libguestfs libguestfs-winsupport 8.8-2 - Rebase to ntfs-3g 2022.10.3 - Fixes: CVE-2022-40284 - resolves: rhbz2236373 libiscsi libnbd libtpms libvirt libvirt-dbus libvirt-python nbdkit netcf perl-Sys-Virt qemu-kvm 6.2.0-33 - CVE-2023-3354 QEMU: VNC: improper I/O watch removal in TLS handshak...

MiracleLinux 9 : libnbd-1.18.1-3.el9 (AXSA:2024-7921:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7921:01 advisory. libnbd: Malicious NBD server may crash libnbd CVE-2023-5871 libnbd: Crash or misbehaviour when NBD server returns an unexpected block size...

MiracleLinux 9 : libnbd-1.18.1-4.el9_4 (AXSA:2024-8825:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8825:02 advisory. libnbd: NBD server improper certificate validation CVE-2024-7383 Tenable has extracted the preceding description block directly from the MiracleLinux securit...

OPENSUSE-SU-2025:15842-1 libnbd-1.24.0-2.1 on GA media

These are all security issues fixed in the libnbd-1.24.0-2.1 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2025-14946

A flaw was found in libnbd. A malicious actor could exploit this by convincing libnbd to open a specially crafted Uniform Resource Identifier URI. This vulnerability arises because non-standard hostnames starting with '-o' are incorrectly interpreted as arguments to the Secure Shell SSH process,...

EUVD-2025-204536

A flaw was found in libnbd. A malicious actor could exploit this by convincing libnbd to open a specially crafted Uniform Resource Identifier URI. This vulnerability arises because non-standard hostnames starting with '-o' are incorrectly interpreted as arguments to the Secure Shell SSH process,...

CVE-2025-14946

A flaw was found in libnbd. A malicious actor could exploit this by convincing libnbd to open a specially crafted Uniform Resource Identifier URI. This vulnerability arises because non-standard hostnames starting with '-o' are incorrectly interpreted as arguments to the Secure Shell SSH process,...