Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988661)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988661 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix scheduling while atomic The driver makes a call into midlayer fcremoteportdele...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989477)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989477 advisory. In the Linux kernel, the following vulnerability has been resolved: net: xfrm: unexport init-annotated xfrm4protocolinit EXPORTSYMBOL and init is a bad combination...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988927)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988927 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Do not change route.addr.srcaddr outside state checks If the state is not idle then...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-988735)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988735 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid use-after-free in ip6fragment Blamed commit claimed rcureadlock was held by ip6fragme...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-990310)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990310 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: prevent potential spectre v1 gadget in ipmetricsconvert if !type continue; if type RTAXMAX...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989663)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989663 advisory. In the Linux kernel, the following vulnerability has been resolved: regulator: da9211: Use irq handler when ready If the system does not come from reset like when it...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-989761)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989761 advisory. In the Linux kernel, the following vulnerability has been resolved: net: sched: Fix use after free in redenqueue We can't use skb again after passing it to...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990147)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990147 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: configfs: Prevent OOB read/write in usbstringcopy Userspace provided string 's' coul...

CVE-2025-62507

Redis is an open source, in-memory database that persists on disk. In versions 8.2.0 and above, a user can run the XACKDEL command with multiple ID's and trigger a stack buffer overflow, which may potentially lead to remote code execution. This issue is fixed in version 8.2.3. To workaround this...

EUVD-2025-37830

EUVD-2025-37830...

EUVD-2025-37833

EUVD-2025-37833...

CVE-2025-47776

Mantis Bug Tracker MantisBT is an open source issue tracker. Due to incorrect use of loose == instead of strict === comparison in the authentication code in versions 2.27.1 and below.PHP type juggling will cause certain MD5 hashes matching scientific notation to be interpreted as numbers. Instanc...

CVE-2025-41338

creationtimestamp| type| source ---|---|--- 2025-11-04 14:20:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4sq5wyz6z2s 2025-11-04 15:35:39+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4sue5gjkxm2...

CVE-2025-64110

creationtimestamp| type| source ---|---|--- 2025-11-04 12:39:54+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3m4skkioyf22o 2025-11-05 02:02:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4txg66yw62s 2025-11-05 03:30:47+00:00| seen|...

USN-7804-2 squid, squid3 vulnerability

USN-7804-1 fixed a vulnerability in Squid. This update provides the corresponding update for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: It was discovered that Squid incorrectly handled certain long SNMP OIDs. A remote attacker could possibly use this issue...

U.S. Prosecutors Indict Cybersecurity Insiders Accused of BlackCat Ransomware Attacks

Federal prosecutors in the U.S. have accused a trio of allegedly hacking the networks of five U.S. companies with BlackCat aka ALPHV ransomware between May and November 2023 and extorting them. Ryan Clifford Goldberg, Kevin Tyler Martin, and an unnamed co–conspirator aka "Co-Conspirator 1" based ...

CVE-2025-11008

creationtimestamp| type| source ---|---|--- 2025-11-04 04:32:07+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m4rpcaqfzd27 2025-11-04 07:27:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4rz3vuxlq2k...

EUVD-2025-37600

The Posts Navigation Links for Sections and Headings – Free by WP Masters plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the 'wpmnavigationlinkssettings' page. This makes it...

EUVD-2025-37626

The TablePress – Tables in WordPress made easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's table shortcode attributes in all versions up to, and including, 3.2.3 due to insufficient input sanitization and output escaping on user supplied attributes. This mak...

CVE-2025-43507

A privacy issue was addressed by moving sensitive data. This issue is fixed in watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, iOS 18.7.2 and iPadOS 18.7.2, visionOS 26.1. An app may be able to fingerprint the user...