Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990248)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990248 advisory. In the Linux kernel, the following vulnerability has been resolved: arm64: asm-bug: Add .align 2 to the end of BUGENTRY When CONFIGDEBUGBUGVERBOSE=n, we fail to add...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988714)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988714 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/fixmap: Fix VM debug warning on unmap Unmapping a fixmap entry is done by calling setfixm...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989373)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989373 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: set the right AMDGPU sg segment limitation The driver needs to set the correct...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990122)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990122 advisory. In the Linux kernel, the following vulnerability has been resolved: jfs: xattr: fix buffer overflow for invalid xattr When an xattr size is not what is expected, it ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989584)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989584 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Fix out-of-bound read in respreadcap16 The following warning was observed runnin...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989953)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989953 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Don't call kcalloc if size arg is zero If the size arg to kcalloc is zero, it...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988859)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988859 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Fix out-of-bound read in respreporttgtpgs The following issue was observed runni...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990202)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990202 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: set the right AMDGPU sg segment limitation The driver needs to set the correct...

CVE-2025-54323

An issue was discovered in the camera in Samsung Mobile Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, and 1580. Improper debug printing leads to information leakage...

CVE-2025-54323

A security vulnerability exists in the camera component of several Samsung Mobile Processors (including Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, and 1580 ). The root cause is improper debug printing , which can lead to information leakage (CWE-200). No specific remedi...

CVE-2025-54323

An issue was discovered in the camera in Samsung Mobile Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, and 1580. Improper debug printing leads to information leakage...

CVE-2025-54323: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in the camera in Samsung Mobile Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, and 1580. Improper debug printing leads to information leakage...

CVE-2025-54323

An issue was discovered in the camera in Samsung Mobile Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, and 1580. Improper debug printing leads to information leakage...

PT-2025-45019

Name of the Vulnerable Software and Affected Versions Samsung Mobile Processor Exynos versions 980 through 990 Samsung Mobile Processor Exynos version 850 Samsung Mobile Processor Exynos versions 1080 through 1280 Samsung Mobile Processor Exynos versions 1330 through 1380 Samsung Mobile Processor...

Vulnerabilities fixed in Arista Networks products

Arista Networks has fixed vulnerabilities in DANZ. The vulnerabilities include several ways for authenticated users with limited privileges to gain access to sensitive systems and data. These include escaping the CLI sandbox, exploiting SSH port forwarding, and making operating system operations...

CVE-2025-12616

PHPGurukul News Portal 1.0 contains an information disclosure flaw in an unknown function of /onps/settings.py. Manipulation can insert sensitive data into debugging code, enabling remote exploitation. The vulnerability is exploitable remotely, with high attack complexity, and public exploit avai...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation of Passkeys in Google Chrome prior to 140.0.7339.80 allowed a local attacker to obtain potentially sensitive information through debug logs. Chromium security severity: Low...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: mm: slub: Avoid waking up kswapd in settrackprepare settrackprepare may cause lock recursion. The issue arises because it is called from hrtimerstartrangens, which holds percpuhrtimerbasesn.lock. However, when...

CVE-2025-52663

A vulnerability was identified in certain UniFi Talk devices where internal debugging functionality remained unintentionally enabled. This issue could allow an attacker with access to the UniFi Talk management network to invoke internal debug operations through the device API. Affected Products:...

CVE-2025-62232

Sensitive data exposure via logging in basic-auth leads to plaintext usernames and passwords written to error logs and forwarded to log sinks when log level is INFO/DEBUG. This creates a high risk of credential compromise through log access. It has been fixed in the following commit: ...