Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987038)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987038 advisory. In the Linux kernel, the following vulnerability has been resolved: net: netlink: afnetlink: Prevent empty skb by adding a check on len. Adding a check on len...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987257)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987257 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Free buffers when a used dynamic event is removed After 65536 dynamic events have been...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986859)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986859 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: invalid parameter check in msmdsiphyenable The function performs a check on the phy...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-986700)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986700 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix memory leak in queryregdbfile In the function queryregdbfile the alpha2...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987115)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987115 advisory. In the Linux kernel, the following vulnerability has been resolved: net/smc: Fix NULL pointer dereferencing in smcvlanbytcpsk Coverity reports a possible NULL...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986997)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986997 advisory. In the Linux kernel, the following vulnerability has been resolved: enetc: Fix illegal access when reading affinityhint irqsetaffinityhit stores a reference to the...

Introducing Jackson 3 support in Spring

This is a new blog post in the Road to GA series, this time sharing more details on the new Jackson 3 support, just a few days after Jackson 3.0.0 GA release, about to be introduced in Spring Boot 4 and related Spring portfolio projects. Jackson is by far the most used JSON library on the JVM, an...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986902)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986902 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: invalid parameter check in dpusetupdspppcc The function performs a check on the ctx...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-386068)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-386068 advisory. In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Add poll mod list filling check In case of improtocols value is 1 and tmprotocols val...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-411457)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-411457 advisory. In the Linux kernel, the following vulnerability has been resolved: staging: iio: frequency: ad9834: Validate frequency parameter value In ad9834writefrequency...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986582)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986582 advisory. In the Linux kernel, the following vulnerability has been resolved: net: netlink: afnetlink: Prevent empty skb by adding a check on len. Adding a check on len...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986484)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986484 advisory. In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in dbFindLeaf Currently while searching for dmtreet for...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986352)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986352 advisory. In the Linux kernel, the following vulnerability has been resolved: net/rds: fix possible cp null dereference cp might be null, calling cp-cpconn would produce null...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986274)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986274 advisory. In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: fix NULL pointer deref in atahostallocpinfo In an unlikely and probably wrong?...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-411720)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-411720 advisory. In the Linux kernel, the following vulnerability has been resolved: xsk: validate user input for XDPUMEM|COMPLETIONFILLRING syzbot reported an illegal copy in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986938)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986938 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: populate connector of struct dppanel DP CTS test case 4.2.2.6 has valid edid with bad...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: apache-commons-vfs (UTSA-2025-984774)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984774 advisory. Relative Path Traversal vulnerability in Apache Commons VFS before 2.10.0. The FileObject API in Commons VFS has a 'resolveFile' method that takes a 'scope' paramete...

RockyLinux 9 : pcs (RLSA-2025:8256)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:8256 advisory. rubygem-rack: Unbounded-Parameter DoS in Rack::QueryParser CVE-2025-46727 Tenable has extracted the preceding description block directly from the RockyLinux...

GHSA-P3X5-MVMP-5F35 Canonical LXD Project Existence Determination Through Error Handling in Image Export Function

Impact In LXD's images export API /1.0/images/fingerprint/export, implementation differences in error handling allow determining project existence without authentication. Specifically, in the following code, errors when multiple images match are directly returned to users as API responses:...

Canonical LXD Project Existence Determination Through Error Handling in Image Export Function

Impact In LXD's images export API /1.0/images/fingerprint/export, implementation differences in error handling allow determining project existence without authentication. Specifically, in the following code, errors when multiple images match are directly returned to users as API responses:...