Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989734)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989734 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix more uncharged while msg has moredata In tcpbpfsendverdict, if msg has more dat...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990027)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990027 advisory. In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix dma queue left shift overflow issue When queue number is 4, left shift overflows...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989957)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989957 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix more uncharged while msg has moredata In tcpbpfsendverdict, if msg has more dat...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989900)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989900 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Use VMMAP instead of VMALLOC for ringbuf After commit 2fd3fb0be1d1 kasan, vmalloc: unpoison...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988805)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988805 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Track subprog poke descriptors correctly and fix use-after-free Subprograms are calling...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989031)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989031 advisory. In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Don't remove map on createrprocess and devicerelease Do not remove the map from th...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990340)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990340 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: us122l: Use sndcardfreewhenclosed at disconnection The USB disconnect callback is supposed ...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-989334)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989334 advisory. In the Linux kernel, the following vulnerability has been resolved: net: mdio: validate parameter addr in mdiobusgetphy The caller may pass any value as addr, what m...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989328)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989328 advisory. In the Linux kernel, the following vulnerability has been resolved: ARM: exynos: Fix refcount leak in exynosmappmu offindmatchingnode returns a node pointer with...

PT-2025-53010

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to BPF percpu hash maps. Missing calls to bpf obj free fields in pcpu copy value could lead to memory referenced by BPF KPTR REF,PERCPU fields...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990202)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990202 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: set the right AMDGPU sg segment limitation The driver needs to set the correct...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989645)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989645 advisory. In the Linux kernel, the following vulnerability has been resolved: net/rds: fix possible cp null dereference cp might be null, calling cp-cpconn would produce null...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989373)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989373 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: set the right AMDGPU sg segment limitation The driver needs to set the correct...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989687)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989687 advisory. In the Linux kernel, the following vulnerability has been resolved: ice: fix vsi-txqmap sizing The approach of having XDP queue per CPU regardless of user's setting...

MGASA-2025-0256 Updated golang packages fix security vulnerabilities

Insufficient validation of bracketed IPv6 hostnames in net/url. CVE-2025-47912 Unbounded allocation when parsing GNU sparse map in archive/tar. CVE-2025-58183 Parsing DER payload can cause memory exhaustion in encoding/asn1. CVE-2025-58185 Lack of limit when parsing cookies can cause memory...

CVE-2025-12369

The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the geojsonmarker shortcode in all versions up to, and including, 4.7. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for...

WordPress Extensions for Leaflet Map plugin <= 4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zaim in WordPress Plugin Extensions for Leaflet Map versions = 4.7...

CVE-2025-12369 Extensions for Leaflet Map <= 4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the geojsonmarker shortcode in all versions up to, and including, 4.7. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for...

CVE-2025-12369

The CVE-2025-12369 entry concerns WordPress plugin Extensions for Leaflet Map (

CVE-2025-12369 Extensions for Leaflet Map <= 4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the geojsonmarker shortcode in all versions up to, and including, 4.7. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for...