Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986938)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986938 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: populate connector of struct dppanel DP CTS test case 4.2.2.6 has valid edid with bad...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986902)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986902 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: invalid parameter check in dpusetupdspppcc The function performs a check on the ctx...

Introducing Jackson 3 support in Spring

This is a new blog post in the Road to GA series, this time sharing more details on the new Jackson 3 support, just a few days after Jackson 3.0.0 GA release, about to be introduced in Spring Boot 4 and related Spring portfolio projects. Jackson is by far the most used JSON library on the JVM, an...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986729)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986729 advisory. In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: fix NULL pointer deref in atahostallocpinfo In an unlikely and probably wrong?...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986402)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986402 advisory. In the Linux kernel, the following vulnerability has been resolved: net: netlink: afnetlink: Prevent empty skb by adding a check on len. Adding a check on len...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986628)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986628 advisory. In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: fix NULL pointer deref in atahostallocpinfo In an unlikely and probably wrong?...

Unity Linux 20.1070e Security Update: golang (UTSA-2025-986182)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986182 advisory. Requests forwarded by ReverseProxy include the raw query parameters from the inbound request, including unparsable parameters rejected by net/http. This could permit...

Unity Linux 20.1070e Security Update: libsoup (UTSA-2025-984675)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984675 advisory. A denial-of-service vulnerability has been identified in the libsoup HTTP client library. This flaw can be triggered when a libsoup client receives a 401 Unauthorize...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-413933)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-413933 advisory. In the Linux kernel, the following vulnerability has been resolved: bnx2x: Fix multiple UBSAN array-index-out-of-bounds Fix UBSAN warnings that occur when using a...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-394628)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-394628 advisory. In the Linux kernel, the following vulnerability has been resolved: fpga: region: add owner module and take its refcount The current implementation of the fpga regio...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987038)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987038 advisory. In the Linux kernel, the following vulnerability has been resolved: net: netlink: afnetlink: Prevent empty skb by adding a check on len. Adding a check on len...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: qt5-qtbase (UTSA-2025-986101)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986101 advisory. An issue was found in the private API function qDecodeDataUrl in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code. If the...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-986700)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986700 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix memory leak in queryregdbfile In the function queryregdbfile the alpha2...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-389366)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-389366 advisory. In the Linux kernel, the following vulnerability has been resolved: atm: Fix NULL pointer dereference When MPOAcacheimposrcvd receives the msg, it can trigger Null...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986859)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986859 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: invalid parameter check in msmdsiphyenable The function performs a check on the phy...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987257)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987257 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Free buffers when a used dynamic event is removed After 65536 dynamic events have been...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986337)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986337 advisory. In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: mask bus reset interrupts between ISR and bottom half In the FireWire OHCI...

RockyLinux 9 : pcs (RLSA-2025:8256)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:8256 advisory. rubygem-rack: Unbounded-Parameter DoS in Rack::QueryParser CVE-2025-46727 Tenable has extracted the preceding description block directly from the RockyLinux...

GHSA-P3X5-MVMP-5F35 Canonical LXD Project Existence Determination Through Error Handling in Image Export Function

Impact In LXD's images export API /1.0/images/fingerprint/export, implementation differences in error handling allow determining project existence without authentication. Specifically, in the following code, errors when multiple images match are directly returned to users as API responses:...

Canonical LXD Project Existence Determination Through Error Handling in Image Export Function

Impact In LXD's images export API /1.0/images/fingerprint/export, implementation differences in error handling allow determining project existence without authentication. Specifically, in the following code, errors when multiple images match are directly returned to users as API responses:...