34034 matches found
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990068)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990068 advisory. In the Linux kernel, the following vulnerability has been resolved: media: rc: bpf attach/detach requires write permission Note that bpf attach/detach also requires...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989165)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989165 advisory. In the Linux kernel, the following vulnerability has been resolved: net: hsr: Fix potential use-after-free The skb is delivered to netifrx which may free it, after...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989952)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989952 advisory. In the Linux kernel, the following vulnerability has been resolved: can: dev: canrestart: fix use after free bug After calling netifrxniskb, dereferencing skb is...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989105)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989105 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: schtaprio: properly cancel timer from tapriodestroy There is a comment in qdisccreate...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989474)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989474 advisory. In the Linux kernel, the following vulnerability has been resolved: net: sched: fix possible refcount leak in tcnewtfilter tfilterput need to be called to put the...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989761)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989761 advisory. In the Linux kernel, the following vulnerability has been resolved: net: sched: Fix use after free in redenqueue We can't use skb again after passing it to...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990373)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990373 advisory. In the Linux kernel, the following vulnerability has been resolved: net: afcan: do not leave a dangling sk pointer in cancreate On error cancreate frees the allocate...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988885)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988885 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: schets: don't remove idle classes from the round-robin list Shuang reported that the...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988857)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988857 advisory. In the Linux kernel, the following vulnerability has been resolved: net/smc: fix connection leak There's a potential leak issue under following execution sequence :...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989645)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989645 advisory. In the Linux kernel, the following vulnerability has been resolved: net/rds: fix possible cp null dereference cp might be null, calling cp-cpconn would produce null...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989805)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989805 advisory. In the Linux kernel, the following vulnerability has been resolved: net: dsa: lantiqgswip: don't use devres for mdiobus As explained in commits: 74b6d7d13307 net: ds...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989897)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989897 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: serialize hash resizes and cleanups Syzbot was able to trigger the followin...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989135)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989135 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: avoid disabling offload when it was never enabled In an incredibly strange API...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988794)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988794 advisory. In the Linux kernel, the following vulnerability has been resolved: virtio-net: Add validation for used length This adds validation for used length might come from a...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988727)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988727 advisory. In the Linux kernel, the following vulnerability has been resolved: net: sched: flower: protect flwalk with rcu Patch that refactored flwalk to use...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989409)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989409 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: schets: don't peek at classes beyond 'nbands' when the number of DRR classes decreases...
SUSE-SU-2025:3935-1 Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-1506002330 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a null pointer dereference in icecopyandinitpkg bsc1248631. - CVE-2025-38617: net/packet: fix a race in packetsetring and packetnotifier bsc1249208. -...
CLSA-2025-1762244848 kernel: Fix of 5 CVEs
ext4: fix possible UAF when remounting r/o a mmp-protected file system CVE-2021-47342 - ext4: fix memory leak in ext4fillsuper - net: defer final 'struct net' free in netns dismantle CVE-2024-56658 - net/sched: schqfq: Fix race condition on qfqaggregate CVE-2025-38477 - ALSA: usb-audio: Fix an...
Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which are vulnerable to CVEs.
Summary IBM Maximo Application Suite uses "form-data 4.0.0, org.apache.cxfcxf-core 3.6.7 , net/http/internal v1.24.1, braces 3.0.2 , cross-spawn 7.0.3 , crypto/x509 1.24.1 1.24.3 , github.com/golang-jwt/jwt/v4 github.com/golang-jwt/jwt/v5 v4.5.0 v5.2.1 , httpd 2.4.37 , setuptools 78.0.2 75.8.0 ,...
