rubygem-rack: Rack QueryParser has an unsafe default allowing params_limit bypass via semicolon-separated parameters

An unsafe default behavior in Rack::QueryParser allows bypass of the paramslimit parameter count restriction when query string parameters are delimited by semicolons ; rather than ampersands &. The parser counts only & when enforcing the limit, while still splitting on both & and ;. As a result, ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990496)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990496 advisory. In the Linux kernel, the following vulnerability has been resolved: IB/core: Implement a limit on UMAD receive List The existing behavior of ibumad, which maintains...

PT-2025-48206

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 7.0.13 Suricata versions prior to 8.0.2 Description Suricata, a network IDS, IPS and NSM engine, is susceptible to a stack overflow when logging large HTTP content types. This can lead to Suricata crashing. A...

rubygem-rack: Rack QueryParser has an unsafe default allowing params_limit bypass via semicolon-separated parameters

An unsafe default behavior in Rack::QueryParser allows bypass of the paramslimit parameter count restriction when query string parameters are delimited by semicolons ; rather than ampersands &. The parser counts only & when enforcing the limit, while still splitting on both & and ;. As a result, ...

rubygem-rack: Rack QueryParser has an unsafe default allowing params_limit bypass via semicolon-separated parameters

An unsafe default behavior in Rack::QueryParser allows bypass of the paramslimit parameter count restriction when query string parameters are delimited by semicolons ; rather than ampersands &. The parser counts only & when enforcing the limit, while still splitting on both & and ;. As a result, ...

md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb

...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989591)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989591 advisory. In the Linux kernel, the following vulnerability has been resolved: netsched: fix NULL deref in fifosetlimit syzbot reported another NULL deref in fifosetlimit 1 I...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989045)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989045 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: oss: Fix PCM OSS buffer allocation overflow We've got syzbot reports hitting INTMAX overflo...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990103)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990103 advisory. In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix inode number range checks Patch series nilfs2: fix potential issues related to reserv...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988844)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988844 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix sleep from invalid context bug in btrfsqgroupinherit Syzkaller reported BUG as...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990324)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990324 advisory. In the Linux kernel, the following vulnerability has been resolved: udmabuf: fix a buf size overflow issue during udmabuf creation by casting sizelimitmb to u64 when...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990166)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990166 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: wext: add extra SIOCSIWSCAN data check In 'cfg80211wextsiwscan', add extra check...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990181)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990181 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix qgroup reserve overflow the qgroup limit We use extentchangeset-byteschanged in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988988)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988988 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: bcm2835: Fix out-of-bounds access with more than 4 slaves Commit 571e31fa60b3 spi: bcm2835:...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-989916)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989916 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: oss: Fix PCM OSS buffer allocation overflow We've got syzbot reports hitting INTMAX overflo...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989367)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989367 advisory. In the Linux kernel, the following vulnerability has been resolved: udmabuf: fix a buf size overflow issue during udmabuf creation by casting sizelimitmb to u64 when...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990286)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990286 advisory. In the Linux kernel, the following vulnerability has been resolved: IB/core: Implement a limit on UMAD receive List The existing behavior of ibumad, which maintains...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989373)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989373 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: set the right AMDGPU sg segment limitation The driver needs to set the correct...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989448)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989448 advisory. In the Linux kernel, the following vulnerability has been resolved: eeprom: ee1004: limit i2c reads to I2CSMBUSBLOCKMAX Commit effa453168a7 i2c: i801: Don't silently...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990202)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990202 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: set the right AMDGPU sg segment limitation The driver needs to set the correct...