PYSEC-2025-108

An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. The methods QuerySet.filter, QuerySet.exclude, and QuerySet.get, and the class Q, are subject to SQL injection when using a suitably crafted dictionary, with dictionary expansion, as the connector argument...

CVE-2025-64459 Potential SQL injection via _connector keyword argument in QuerySet and Q objects

An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. The methods QuerySet.filter, QuerySet.exclude, and QuerySet.get, and the class Q, are subject to SQL injection when using a suitably crafted dictionary, with dictionary expansion, as the connector argument...

CVE-2025-52602

CVE-2025-52602 affects HCL BigFix Query WebUI Query, where an HTTP GET endpoint may disclose discoverable data such as group names and active user names/IDs via the /api/v1/query endpoint. This exposure could enable targeted phishing or social engineering. The available connected documents confir...

[SECURITY] Fedora 43 Update: rust-get-size2-0.7.0-2.fc43

Determine the size in bytes an object occupies inside RAM...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990314)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990314 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dispnv04: fix null pointer dereference in nv17tvgethdmodes In nv17tvgethdmodes, the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989481)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989481 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't return unset power in ieee80211gettxpower We can get a UBSAN warning if...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-989334)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989334 advisory. In the Linux kernel, the following vulnerability has been resolved: net: mdio: validate parameter addr in mdiobusgetphy The caller may pass any value as addr, what m...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-989929)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989929 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcmu: Fix possible page UAF tcmutrygetdatapage looks up pages under cmdrlock, but i...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989123)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989123 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: renesas: rzn1: Fix possible null-ptr-deref in shpfcmapresources It will cause...

CVE-2025-31954: Use of GET Request Method With Sensitive Query Strings

HCL iAutomate v6.5.1 and v6.5.2 is susceptible to a sensitive information disclosure. An HTTP GET method is used to process a request and includes sensitive information in the query string of that request. An attacker could potentially access information or resources they were not intended to see...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988853)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988853 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/panel: fix a possible null pointer dereference In versatilepanelgetmodes, the return value of...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988866)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988866 advisory. In the Linux kernel, the following vulnerability has been resolved: tee: amdtee: fix an ISERR vs NULL bug The getfreepages function does not return error pointers it...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988936)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988936 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: host: isp116x: check return value after calling platformgetresource It will cause...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990030)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990030 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/exynos/vidi: fix memory leak in .getmodes The duplicated EDID is never freed. Fix it. Tenable...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989816)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989816 advisory. In the Linux kernel, the following vulnerability has been resolved: drbd: Fix five use after free bugs in getinitialstate In getinitialstate, it calls...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989376)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989376 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: host: ohci-tmio: check return value after calling platformgetresource It will cause...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989645)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989645 advisory. In the Linux kernel, the following vulnerability has been resolved: net/rds: fix possible cp null dereference cp might be null, calling cp-cpconn would produce null...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988997)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988997 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Always make an attempt to map eVMCS after migration When enlightened VMCS is in use an...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988745)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988745 advisory. In the Linux kernel, the following vulnerability has been resolved: regulator: pfuze100: Fix refcount leak in pfuzeparseregulatorsdt ofnodeget returns a node with...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989029)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989029 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3: check return value after calling platformgetresource It will cause...