USN-7691-1: MySQL vulnerabilities

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.43 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. Ubuntu 25.04 has been updated to MySQL 8.4.6. In addition to security fixes, the updated packages...

Linux Distros Unpatched Vulnerability : CVE-2017-13305

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A information disclosure vulnerability in the Upstream kernel encrypted-keys. Product: Android. Versions: Android kernel. Android ID: A-70526974. CVE-2017-13305...

MGASA-2025-0218 Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.101 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links...

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.101 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links...

Linux Distros Unpatched Vulnerability : CVE-2019-15791

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfsbtrfsioctlfdreplace installs an fd referencing a...

Linux Distros Unpatched Vulnerability : CVE-2021-0961

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In quotaprocwrite of xtquota2.c, there is a possible way to read kernel memory due to uninitialized data. This could lead to local information disclosure with...

OPENSUSE-SU-2025:15432-1 gio-branding-upstream-2.84.4-1.1 on GA media

These are all security issues fixed in the gio-branding-upstream-2.84.4-1.1 package on the GA media of openSUSE Tumbleweed...

Linux Distros Unpatched Vulnerability : CVE-2017-0750

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A elevation of privilege vulnerability in the Upstream Linux file system. Product: Android. Versions: Android kernel. Android ID: A-36817013. CVE-2017-0750 Note...

Linux Distros Unpatched Vulnerability : CVE-2020-0404

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In uvcscanchainforward of uvcdriver.c, there is a possible linked list corruption due to an unusual root cause. This could lead to local escalation of privilege...

Linux Distros Unpatched Vulnerability : CVE-2022-20008

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In mmcblkreadsingle of block.c, there is a possible way to read kernel heap memory due to uninitialized data. This could lead to local information disclosure if...

Linux Distros Unpatched Vulnerability : CVE-2021-39802

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In changepterange of mprotect.c , there is a possible way to make a shared mmap writable due to a permissions bypass. This could lead to local escalation of...

Linux Distros Unpatched Vulnerability : CVE-2019-1010022

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The component is: nptl. The attack vector is:...

Linux Distros Unpatched Vulnerability : CVE-2022-20572

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In veritytarget of dm-verity-target.c, there is a possible way to modify read-only files due to a missing permission check. This could lead to local escalation ...

Linux Distros Unpatched Vulnerability : CVE-2021-0935

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ip6xmit of ip6output.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System executi...

[SECURITY] Fedora 42 Update: perl-5.40.3-519.fc42

Perl is a high-level programming language with roots in C, sed, awk and shell scripting. Perl is good at handling processes and files, and is especially good at handling text. Perl's hallmarks are practicality and efficiency. While it is used to do a lot of different things, Perl's most common...

Fedora 41 : firefox (2025-aacceb8e35)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-aacceb8e35 advisory. - New upstream version 140.0.2 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

CLSA-2025-1754381806 Fix of 8 CVEs

New microcode update packages from upstream up to 2025-05-12: - New microcodes: sig 0x000a06d1, pfmask 0x20, 2025-02-07, rev 0xa0000d1, size 1635328 sig 0x000a06d1, pfmask 0x95, 2025-02-07, rev 0x10003a2, size 1664000 sig 0x000b0650, pfmask 0x80, 2025-03-18, rev 0x000a, size 136192 sig 0x000b06d1...

CLSA-2025-1754381695 Fix of 8 CVEs

New microcode update packages from upstream up to 2025-05-12: - New microcodes: sig 0x000a06d1, pfmask 0x20, 2025-02-07, rev 0xa0000d1, size 1635328 sig 0x000a06d1, pfmask 0x95, 2025-02-07, rev 0x10003a2, size 1664000 sig 0x000b0650, pfmask 0x80, 2025-03-18, rev 0x000a, size 136192 sig 0x000b06d1...

Moderate: Red Hat Bug Fix Advisory: linux-firmware bug fix and enhancement update

An update for linux-firmware is now available for Red Hat Enterprise Linux 9. The linux-firmware packages contain all of the firmware files that are required by various devices to operate. Bug Fixes and Enhancements: Update linux-firmware to latest upstream rhel-9.6.z JIRA:RHEL-103993...

SUSE CVE-2025-8454

It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscripts a collection of scripts to make the life of a Debian Package maintainer easier, skips OpenPGP verification if the upstream source is already downloaded from a previous run even...