Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993099)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993099 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/meson: Fix refcount bugs in mesonvpuhasavailableconnectors In this function, there are two...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993124)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993124 advisory. In the Linux kernel, the following vulnerability has been resolved: speakup: Fix sizeof vs ARRAYSIZE bug The buf pointer is an array of u16 values. This code should ...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993220)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993220 advisory. In the Linux kernel, the following vulnerability has been resolved: sched/core: Prevent rescheduling when interrupts are disabled David reported a warning observed...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992773)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992773 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: fix null pointer dereferencing in pinctrldttomap Here is the BUG report by...

Linux Distros Unpatched Vulnerability : CVE-2023-54265

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: Fix an uninit variable access bug in ip6makeskb Syzbot reported a bug as following: ===================================================== BUG: KMSAN:...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992942)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992942 advisory. In the Linux kernel, the following vulnerability has been resolved: cifs: fix oops during encryption When running xfstests against Azure the following oops occurred ...

Linux Distros Unpatched Vulnerability : CVE-2022-50884

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm: Prevent drmcopyfield to attempt copying a NULL pointer There are some struct drmdriver fields that are required by drivers since drmcopyfield attempts to...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992843)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992843 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix UBSAN shift-out-of-bounds warning If getnumsdmaqueues or getnumxgmisdmaqueues is ...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993065)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993065 advisory. In the Linux kernel, the following vulnerability has been resolved: net: bgmac: Fix a BUG triggered by wrong bytescompl On one of our machines we got: kernel BUG at...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992900)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992900 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid use f2fsbugon in f2fsnewnodepage As Dipanjan Das reported, syzkaller found a...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993064)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993064 advisory. In the Linux kernel, the following vulnerability has been resolved: mcb: fix a double free bug in chameleonparsegdd In chameleonparsegdd, if mcbdeviceregister fails,...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992913)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992913 advisory. In the Linux kernel, the following vulnerability has been resolved: memory: of: Fix refcount leak bug in ofgetddrtimings We should add the ofnodeput when breaking ou...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992711)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992711 advisory. In the Linux kernel, the following vulnerability has been resolved: ath11k: fix netdev open race Make sure to allocate resources needed before registering the device...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993021)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993021 advisory. In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/hisi: Drop second sensor hi3660 The commit 74c8e6bffbe1 driver core: Add allocsiz...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992796)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992796 advisory. In the Linux kernel, the following vulnerability has been resolved: efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption The TPM event log table is...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992973)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992973 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: avoid use-after-free in ext4extshowleaf In ext4findextent, path may be freed by error or be...

CVE-2025-61594

The CVE concerns the URI Ruby module. In versions ≤0.12.4 (Ruby 3.2), ≤0.13.2 (Ruby 3.3), and ≤1.0.3 (Ruby 3.4), using the + operator to join URIs could leak passwords from the original URI, bypassing a prior fix for CVE-2025-27221 and exposing credentials. Mitigations are available in fixed rele...

CVE-2025-14987 Cross Namespace Commands Authorization Bypass

When system.enableCrossNamespaceCommands is enabled on by default, the Temporal server permits certain workflow task commands e.g. StartChildWorkflowExecution, SignalExternalWorkflowExecution, RequestCancelExternalWorkflowExecution to target a different namespace than the namespace authorized at...

UBUNTU-CVE-2025-69261

WasmEdge is a WebAssembly runtime. Prior to version 0.16.0-alpha.3, a multiplication in WasmEdge/include/runtime/instance/memory.h can wrap, causing checkAccessBound to incorrectly allow the access. This leads to a segmentation fault. Version 0.16.0-alpha.3 contains a patch for the issue...

OPENSUSE-SU-2025:20121-1 Security update for redis

This update for redis fixes the following issues: - Updated to 8.2.3 boo1252996 CVE-2025-62507 https://github.com/redis/redis/releases/tag/8.2.3 - Security fixes - CVE-2025-62507 Bug in XACKDEL may lead to stack overflow and potential RCE - Bug fixes - HGETEX: A missing numfields argument when...