35663 matches found
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990256)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990256 advisory. In the Linux kernel, the following vulnerability has been resolved: um: net: Do not use drvdata in release The drvdata is not available in release. Let's just use...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989743)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989743 advisory. In the Linux kernel, the following vulnerability has been resolved: um: net: Do not use drvdata in release The drvdata is not available in release. Let's just use...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989105)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989105 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: schtaprio: properly cancel timer from tapriodestroy There is a comment in qdisccreate...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989135)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989135 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: avoid disabling offload when it was never enabled In an incredibly strange API...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989897)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989897 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: serialize hash resizes and cleanups Syzbot was able to trigger the followin...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988794)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988794 advisory. In the Linux kernel, the following vulnerability has been resolved: virtio-net: Add validation for used length This adds validation for used length might come from a...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989409)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989409 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: schets: don't peek at classes beyond 'nbands' when the number of DRR classes decreases...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989805)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989805 advisory. In the Linux kernel, the following vulnerability has been resolved: net: dsa: lantiqgswip: don't use devres for mdiobus As explained in commits: 74b6d7d13307 net: ds...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990373)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990373 advisory. In the Linux kernel, the following vulnerability has been resolved: net: afcan: do not leave a dangling sk pointer in cancreate On error cancreate frees the allocate...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-989761)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989761 advisory. In the Linux kernel, the following vulnerability has been resolved: net: sched: Fix use after free in redenqueue We can't use skb again after passing it to...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988727)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988727 advisory. In the Linux kernel, the following vulnerability has been resolved: net: sched: flower: protect flwalk with rcu Patch that refactored flwalk to use...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989645)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989645 advisory. In the Linux kernel, the following vulnerability has been resolved: net/rds: fix possible cp null dereference cp might be null, calling cp-cpconn would produce null...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988885)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988885 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: schets: don't remove idle classes from the round-robin list Shuang reported that the...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988857)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988857 advisory. In the Linux kernel, the following vulnerability has been resolved: net/smc: fix connection leak There's a potential leak issue under following execution sequence :...
SUSE-SU-2025:3935-1 Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-1506002330 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a null pointer dereference in icecopyandinitpkg bsc1248631. - CVE-2025-38617: net/packet: fix a race in packetsetring and packetnotifier bsc1249208. -...
CLSA-2025-1762244848 kernel: Fix of 5 CVEs
ext4: fix possible UAF when remounting r/o a mmp-protected file system CVE-2021-47342 - ext4: fix memory leak in ext4fillsuper - net: defer final 'struct net' free in netns dismantle CVE-2024-56658 - net/sched: schqfq: Fix race condition on qfqaggregate CVE-2025-38477 - ALSA: usb-audio: Fix an...
Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which are vulnerable to CVEs.
Summary IBM Maximo Application Suite uses "form-data 4.0.0, org.apache.cxfcxf-core 3.6.7 , net/http/internal v1.24.1, braces 3.0.2 , cross-spawn 7.0.3 , crypto/x509 1.24.1 1.24.3 , github.com/golang-jwt/jwt/v4 github.com/golang-jwt/jwt/v5 v4.5.0 v5.2.1 , httpd 2.4.37 , setuptools 78.0.2 75.8.0 ,...
CVE-2025-12503
EasyFlow .NET and EasyFlow AiNet developed by Digiwin has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...
PT-2025-44752
Name of the Vulnerable Software and Affected Versions EasyFlow .NET and EasyFlow AiNet developed by Digiwin affected versions not specified Description EasyFlow .NET and EasyFlow AiNet developed by Digiwin contains a SQL Injection issue. Authenticated remote attackers can inject arbitrary SQL...
