Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988820)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988820 advisory. In the Linux kernel, the following vulnerability has been resolved: ima: Fix a potential integer overflow in imaappraisemeasurement When the ima-modsig is enabled, t...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988801)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988801 advisory. In the Linux kernel, the following vulnerability has been resolved: xtensa: xtfpga: Fix refcount leak bug in setup In machinesetup, offindcompatiblenode will return ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990368)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990368 advisory. In the Linux kernel, the following vulnerability has been resolved: hvnetvsc: Register VF in netvscprobe if NETDEVICEREGISTER missed If hvnetvsc driver is unloaded a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989109)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989109 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctltcpnotsentlowat. While reading sysctltcpnotsentlowat, it can be...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990242)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990242 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: betop: check shape of output reports betopffinit only checks the total sum of the report...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989166)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989166 advisory. In the Linux kernel, the following vulnerability has been resolved: net: amd-xgbe: Fix skb data length underflow There will be BUGON triggered in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990316)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990316 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip finding free audio for unknown engineid WHY ENGINEIDUNKNOWN = -1 and can no...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989574)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989574 advisory. In the Linux kernel, the following vulnerability has been resolved: iio: trigger: sysfs: fix possible memory leak in iiosysfstriginit devsetname allocates memory for...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989629)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989629 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/iommu: Add missing ofnodeput in iommuinitearlydart The devicenode pointer is returned by...

AlmaLinux 10 : .NET 8.0 (ALSA-2025:18152)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:18152 advisory. dotnet: .NET Information Disclosure Vulnerability CVE-2025-55248 dotnet: .NET Security Feature Bypass Vulnerability CVE-2025-55315 dotnet: .NET Denial o...

Oracle Linux 8 : xorg-x11-server (ELSA-2025-19434)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19434 advisory. 1.20.11-27 - CVE fix for: CVE-2025-62229 RHEL-119953, CVE-2025-62230 RHEL-120027, CVE-2025-62231 RHEL-124993 Tenable has extracted the preceding...

RockyLinux 8 : kernel (RLSA-2025:19102)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:19102 advisory. kernel: Bluetooth: L2CAP: fix bad unlock balance in l2capdisconnectrsp CVE-2023-53297 kernel: efivarfs: Fix slab-out-of-bounds in efivarfsdcompare...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: samba (UTSA-2025-988620)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988620 advisory. A flaw was found in Samba, in the vfsstreamsxattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated...

Alibaba Cloud Linux 3 : 0163: gnutls (ALINUX3-SA-2025:0163)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2025:0163 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-32988: A flaw was found in GnuTLS...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2025-111 (ALASKERNEL-5.4-2025-111)

The version of kernel installed on the remote host is prior to 5.4.299-219.436. It is, therefore, affected by a vulnerability as referenced in the ALAS2KERNEL-5.4-2025-111 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: Protect against send buffer overflow in...

Medium: qemu

Issue Overview: A flaw was found in QEMU. An assertion failure was present in the usbepget function in hw/net/core.c when trying to get the USB endpoint from a USB device. This flaw may allow a malicious unprivileged guest user to crash the QEMU process on the host and cause a denial of service...

Important: squid

Issue Overview: Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asnbuildobjid in lib/snmplib/asn1.c. CVE-2025-59362 Affected Packages: squid Issue Correction: Run dnf update squid --releasever 2023.9.20251014 or dnf update --advisory ALAS2023-2025-1219 --releasever...

Medium: openssl11

Issue Overview: Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds...

AlmaLinux 10 : kernel (ALSA-2025:11428)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:11428 advisory. kernel: media: uvcvideo: Remove dangling pointers CVE-2024-58002 kernel: media: uvcvideo: Fix double free in error path CVE-2024-57980 kernel: wifi:...

RockyLinux 9 : firefox (RLSA-2025:10072)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:10072 advisory. firefox: Content-Disposition header ignored when a file is included in an embed or object tag CVE-2025-6430 firefox: Use-after-free in FontFaceSet...