Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-986711)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986711 advisory. In the Linux kernel, the following vulnerability has been resolved: dmaengine: Fix double increment of clientcount in dmachanget The first time dmachanget is called...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986600)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986600 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: host: ohci-tmio: check return value after calling platformgetresource It will cause...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987090)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987090 advisory. In the Linux kernel, the following vulnerability has been resolved: tee: amdtee: fix an ISERR vs NULL bug The getfreepages function does not return error pointers it...

CVE-2025-52021: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability exists in the editproduct.php file of PuneethReddyHC Online Shopping System Advanced 1.0. The productid GET parameter is unsafely passed to a SQL query without proper validation or parameterization...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987177)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987177 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu: Fix armsmmudevice refcount leak when armsmmurpmget fails armsmmurpmget invokes...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987100)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987100 advisory. In the Linux kernel, the following vulnerability has been resolved: drbd: Fix five use after free bugs in getinitialstate In getinitialstate, it calls...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2025-936101)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-936101 advisory. A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in getblockrow at libavfilter/vfbm3d.c, which might lead to memory corruption and other potential...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-403670)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-403670 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: use helper function to calculate expect ID Delete expectation path is missi...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987087)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987087 advisory. In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: fix possible null-ptr-deref in cadencenanddtprobe It will cause...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986431)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986431 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcmu: Fix possible page UAF tcmutrygetdatapage looks up pages under cmdrlock, but i...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-407733)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-407733 advisory. In the Linux kernel, the following vulnerability has been resolved: hsr: Fix uninit-value access in hsrgetnode KMSAN reported the following uninit-value access issue...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986723)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986723 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/msm/hdmi: check return value after calling platformgetresourcebyname It will cause...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-986785)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986785 advisory. In the Linux kernel, the following vulnerability has been resolved: net: tun: Fix memory leaks of napigetfrags kmemleak reports after running testprogs: unreference...

EUVD-2025-32882

Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys via a /nagioslogserver/index.php/api/system/getusers call. This is GL:NLS475...

CVE-2025-44823

Nagios Log Server (before 2024R1.3.2) is vulnerable: unauthenticated? No—authenticated users with access to the API can call /nagioslogserver/index.php/api/system/get_users to retrieve cleartext admin API keys. The underlying issue exposes user accounts and API keys, enabling full system compromi...

CVE-2025-44823

Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys via a /nagioslogserver/index.php/api/system/getusers call. This is GL:NLS475...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-380009)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-380009 advisory. In the Linux kernel, the following vulnerability has been resolved: clk: Fix clkcoreget NULL dereference It is possible for clkcoreget to dereference a NULL in the...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-423736)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-423736 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: fix race condition between ipv6getifaddr and ipv6deladdr Although ipv6getifaddr walks...

SUSE CVE-2025-59734

It is possible to cause an use-after-free write in SANM decoding with a carefully crafted animation using subversion storedframe. Stored frames can later be referenced by FTCH chunks. For files using subversion storedframe. Leaving ctx-hasdimensions set to false. A subsequent chunk with type FTCH...

DEBIAN-CVE-2025-59734

It is possible to cause an use-after-free write in SANM decoding with a carefully crafted animation using subversion storedframe. Stored frames can later be referenced by FTCH chunks. For files using subversion storedframe. Leaving ctx-hasdimensions set to false. A subsequent chunk with type...