Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414652)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414652 advisory. A flaw in the processing of received ICMP errors ICMP fragment needed and ICMP redirect in the Linux kernel functionality was found to allow the ability to quickly...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414524)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414524 advisory. An issue was discovered in net/tipc/crypto.c in the Linux kernel before 5.14.16. The Transparent Inter- Process Communication TIPC functionality allows remote...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987036)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987036 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix listadd corruption in lpfcdraintxq When parsing the txq list in lpfcdraintxq, the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986873)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986873 advisory. In the Linux kernel, the following vulnerability has been resolved: net: fddi: fix UAF in fzaprobe fp is netdev private data and it cannot be used after freenetdev...

The vulnerability of the tls_rx_msg_size() function in the Linux kernel’s TLS component allows a attacker to cause a service failure.

The vulnerability of the tlsrxmsgsize function in the Linux kernel’s TLS component is related to the unlimited distribution of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987373)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987373 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix potential memory leak on unlikely error case If skblinearize is needed and fail...

PT-2025-41041

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0 1 Description The Linux kernel contains a flaw in the bpf, sockmap subsystem related to repeated calls to sock put when a message has more data. Specifically, in the tcp bpf send verdict redirection, the ev...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986506)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986506 advisory. In the Linux kernel, the following vulnerability has been resolved: media: s5pcec: limit msg.len to CECMAXMSGSIZE I expect that the hardware will have limited this t...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986974)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986974 advisory. In the Linux kernel, the following vulnerability has been resolved: media: s5pcec: limit msg.len to CECMAXMSGSIZE I expect that the hardware will have limited this t...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986356)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986356 advisory. In the Linux kernel, the following vulnerability has been resolved: media: s5pcec: limit msg.len to CECMAXMSGSIZE I expect that the hardware will have limited this t...

The Bug Report – September 2025 Edition

The Bug Report – September 2025 Edition By Jonathan Omakun · October 7, 2025 Why am I here? Ah, September. When the leaves change colors, so do the threat landscapes! As summer fades into autumn, cybersecurity professionals are harvesting a bumper crop of vulnerabilities that would make any pumpk...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986378)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986378 advisory. In the Linux kernel, the following vulnerability has been resolved: dccp: fix dccpv4err/dccpv6err again dh-dccphx is the 9th byte offset 8 in struct dccphdr, not in...

CVE-2025-40989

Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/projectmessage/add/xxx", affecting to "message" parameter via POST. This vulnerability could allow a remote attacker to send a speciall...

EUVD-2025-32583

Components of the YoSmart YoLink ecosystem through 2025-10-02 leverage unencrypted MQTT to communicate over the internet. An attacker with the ability to monitor network traffic could therefore obtain sensitive information or tamper with the traffic to control affected devices. This affects YoLin...

DEBIAN-CVE-2025-61765

python-socketio is a Python implementation of the Socket.IO realtime client and server. A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through malicious pickle deserialization in multi-server deployments on which...

UBUNTU-CVE-2025-61765

python-socketio is a Python implementation of the Socket.IO realtime client and server. A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through malicious pickle deserialization in multi-server deployments on which...

CVE-2025-61765 python-socketio vulnerable to arbitrary Python code execution (RCE) through malicious pickle deserialization in certain multi-server deployments

python-socketio is a Python implementation of the Socket.IO realtime client and server. A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through malicious pickle deserialization in multi-server deployments on which...

CVE-2025-61765 python-socketio vulnerable to arbitrary Python code execution (RCE) through malicious pickle deserialization in certain multi-server deployments

python-socketio is a Python implementation of the Socket.IO realtime client and server. A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through malicious pickle deserialization in multi-server deployments on which...

CVE-2025-61765 python-socketio vulnerable to arbitrary Python code execution (RCE) through malicious pickle deserialization in certain multi-server deployments

python-socketio is a Python implementation of the Socket.IO realtime client and server. A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through malicious pickle deserialization in multi-server deployments on which...

CVE-2025-61765

CVE-2025-61765 affects the Python Socket.IO implementation (python-socketio) used for real-time client/server communications. The root cause is unsafe deserialization of messages via Python’s pickle.loads() when inter-server messaging uses a backend message queue (e.g., Redis). In multi-server de...