Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988866)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988866 advisory. In the Linux kernel, the following vulnerability has been resolved: tee: amdtee: fix an ISERR vs NULL bug The getfreepages function does not return error pointers it...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-989574)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989574 advisory. In the Linux kernel, the following vulnerability has been resolved: iio: trigger: sysfs: fix possible memory leak in iiosysfstriginit devsetname allocates memory for...

AlmaLinux 10 : .NET 8.0 (ALSA-2025:18152)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:18152 advisory. dotnet: .NET Information Disclosure Vulnerability CVE-2025-55248 dotnet: .NET Security Feature Bypass Vulnerability CVE-2025-55315 dotnet: .NET Denial o...

Oracle Linux 8 : xorg-x11-server (ELSA-2025-19434)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19434 advisory. 1.20.11-27 - CVE fix for: CVE-2025-62229 RHEL-119953, CVE-2025-62230 RHEL-120027, CVE-2025-62231 RHEL-124993 Tenable has extracted the preceding...

RockyLinux 8 : kernel (RLSA-2025:19102)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:19102 advisory. kernel: Bluetooth: L2CAP: fix bad unlock balance in l2capdisconnectrsp CVE-2023-53297 kernel: efivarfs: Fix slab-out-of-bounds in efivarfsdcompare...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: samba (UTSA-2025-988620)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988620 advisory. A flaw was found in Samba, in the vfsstreamsxattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated...

Alibaba Cloud Linux 3 : 0163: gnutls (ALINUX3-SA-2025:0163)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2025:0163 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-32988: A flaw was found in GnuTLS...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2025-111 (ALASKERNEL-5.4-2025-111)

The version of kernel installed on the remote host is prior to 5.4.299-219.436. It is, therefore, affected by a vulnerability as referenced in the ALAS2KERNEL-5.4-2025-111 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: Protect against send buffer overflow in...

Medium: qemu

Issue Overview: A flaw was found in QEMU. An assertion failure was present in the usbepget function in hw/net/core.c when trying to get the USB endpoint from a USB device. This flaw may allow a malicious unprivileged guest user to crash the QEMU process on the host and cause a denial of service...

Medium: openssl11

Issue Overview: Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds...

Important: squid

Issue Overview: Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asnbuildobjid in lib/snmplib/asn1.c. CVE-2025-59362 Affected Packages: squid Issue Correction: Run dnf update squid --releasever 2023.9.20251014 or dnf update --advisory ALAS2023-2025-1219 --releasever...

AlmaLinux 10 : kernel (ALSA-2025:11428)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:11428 advisory. kernel: media: uvcvideo: Remove dangling pointers CVE-2024-58002 kernel: media: uvcvideo: Fix double free in error path CVE-2024-57980 kernel: wifi:...

RockyLinux 9 : firefox (RLSA-2025:10072)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:10072 advisory. firefox: Content-Disposition header ignored when a file is included in an embed or object tag CVE-2025-6430 firefox: Use-after-free in FontFaceSet...

RockyLinux 10 : toolbox (RLSA-2025:13674)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:13674 advisory. nvidia-container-toolkit: Privilege Escalation via Hook Initialization in NVIDIA Container Toolkit CVE-2025-23266 Tenable has extracted the preceding descriptio...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414609)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414609 advisory. An out-of-bounds OOB memory write flaw was found in listdevices in drivers/md/dm-ioctl.c in the Multi- device driver module in the Linux kernel before 5.12. A bound...

Unity Linux 20.1070e Security Update: nginx (UTSA-2025-986184)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986184 advisory. NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414621)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414621 advisory. An issue was discovered in the Linux kernel through 5.11.10. drivers/net/ethernet/freescale/gianfar.c in the Freescale Gianfar Ethernet driver allows attackers to...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987146)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987146 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctltcpmaxreordering. While reading sysctltcpmaxreordering, it can b...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986648)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986648 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: break out if skbheaderpointer returns NULL in sctprcvootb We should always check if...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-418583)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-418583 advisory. In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix missing cleanup on rollforward recovery error In an error injection test of a routine...