Azure Linux 3.0 Security Update: kernel (CVE-2024-49877)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49877 advisory. - In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix possible null-ptr-deref in...

Azure Linux 3.0 Security Update: kernel (CVE-2024-44998)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-44998 advisory. - In the Linux kernel, the following vulnerability has been resolved: atm: idt77252: prevent use after free in...

Azure Linux 3.0 Security Update: nodejs / nodejs18 (CVE-2024-30260)

The version of nodejs / nodejs18 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-30260 advisory. - Undici is an HTTP/1.1 client, written from scratch for Node.js. Undici cleared Authorization and...

Azure Linux 3.0 Security Update: expat / python3 (CVE-2024-50602)

The version of expat / python3 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50602 advisory. - An issue was discovered in libexpat before 2.6.4. There is a crash within the XMLResumeParser...

Azure Linux 3.0 Security Update: kernel (CVE-2024-42154)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42154 advisory. - In the Linux kernel, the following vulnerability has been resolved: tcpmetrics: validate source addr length ...

Azure Linux 3.0 Security Update: kernel (CVE-2024-46800)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46800 advisory. - In the Linux kernel, the following vulnerability has been resolved: sch/netem: fix use after free in...

Azure Linux 3.0 Security Update: kernel (CVE-2024-45021)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45021 advisory. - In the Linux kernel, the following vulnerability has been resolved: memcgwriteeventcontrol: fix a...

Azure Linux 3.0 Security Update: kernel (CVE-2024-42068)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42068 advisory. - In the Linux kernel, the following vulnerability has been resolved: bpf: Take return from setmemoryro into...

Azure Linux 3.0 Security Update: kernel (CVE-2024-42223)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42223 advisory. - In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: tda10048: Fix...

Azure Linux 3.0 Security Update: httpd / mod_http2 (CVE-2024-27316)

The version of httpd / modhttp2 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27316 advisory. - HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to genera...

Azure Linux 3.0 Security Update: libsoup (CVE-2024-52531)

The version of libsoup installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-52531 advisory. - GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in...

Azure Linux 3.0 Security Update: kernel (CVE-2024-46844)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46844 advisory. - In the Linux kernel, the following vulnerability has been resolved: um: line: always fill errorout in...

Azure Linux 3.0 Security Update: edk2 / hvloader (CVE-2023-45230)

The version of edk2 / hvloader installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-45230 advisory. - EDK2's Network Package is susceptible to a buffer overflow vulnerability via a long server ID optio...

Azure Linux 3.0 Security Update: kernel (CVE-2024-46677)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46677 advisory. - In the Linux kernel, the following vulnerability has been resolved: gtp: fix a potential NULL pointer...

Azure Linux 3.0 Security Update: hyperv-daemons / kernel (CVE-2024-27015)

The version of hyperv-daemons / kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27015 advisory. - In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable:...

Amazon Linux AMI : postgresql92 (ALAS-2025-1959)

The version of postgresql92 installed on the remote host is prior to 9.2.24-3.70. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2025-1959 advisory. While modifying certain SQL array values, missing overflow checks let authenticated database users write arbitrary...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : go1.23 (SUSE-SU-2025:0280-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0280-1 advisory. - Update to go1.23.5 bsc1229122 - CVE-2024-45341: Properly check for IPv6 hosts in URIs bsc12360...

Vim < 9.1.1043 Out-of-bounds Write

A segmentation fault was found in Vim before 9.1.1043. In silent Ex mode -s -e, Vim typically doesn't show a screen and just operates silently in batch mode. However, it is still possible to trigger the function that handles the scrolling of a gui version of Vim by feeding some binary characters ...

Oracle Linux 9 : kernel (ELSA-2025-0578)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-0578 advisory. - arm64/sve: Discard stale CPU state when handling SVE traps Mark Salter RHEL-72218 CVE-2024-50275 - i40e: fix race condition by adding filter's...

Fedora 41 : stb (2025-6a64d3b2fc)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-6a64d3b2fc advisory. Add another patch for the root cause of CVE-2021-45340. We already have a patch for CVE-2021-45340, but adding this new patch may prevent a related, unproven...