Important: runfinch-finch

Issue Overview: net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed withi...

RUSTSEC-2025-0136 Underflow in aes_key_unwrap function

The aeskeyunwrap function would panic if passed a ciphertext that was too short. In a debug build, it would panic due to a subtraction underflow. In a release build, it would use the small negative quantity to allocate a vector. Since the allocator expects an unsigned quantity, the negative value...

Underflow in aes_key_unwrap function

The aeskeyunwrap function would panic if passed a ciphertext that was too short. In a debug build, it would panic due to a subtraction underflow. In a release build, it would use the small negative quantity to allocate a vector. Since the allocator expects an unsigned quantity, the negative value...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990586)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990586 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: core: Put LLD module refcnt after SCSI device is released SCSI host release is triggered wh...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990566)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990566 advisory. In the Linux kernel, the following vulnerability has been resolved: arm64: asm-bug: Add .align 2 to the end of BUGENTRY When CONFIGDEBUGBUGVERBOSE=n, we fail to add...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990418)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990418 advisory. In the Linux kernel, the following vulnerability has been resolved: net: mdio: unexport init-annotated mdiobusinit EXPORTSYMBOL and init is a bad combination because...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990506)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990506 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: fix panic when forwarding a pkt with no in6 dev kongweibin reported a kernel panic in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990532)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990532 advisory. In the Linux kernel, the following vulnerability has been resolved: qede: confirm skb is allocated before using qedebuildskb assumes buildskb always works and goes...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990589)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990589 advisory. In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fix potential crash on module unload The vmbus driver relies on the panic...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990538)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990538 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Prevent panic when SDMA is disabled If the hfi1 module is loaded with HFI1CAPSDMA off,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990584)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990584 advisory. In the Linux kernel, the following vulnerability has been resolved: MIPS: Octeon: Add PCIe link status check The standard PCIe configuration read-write interface is...

GO-2025-4017 Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989730)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989730 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: xtIDLETIMER: fix panic that occurs when timertype has garbage value Currently, when th...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989647)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989647 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on totaldatablocks As Yanming reported in bugzilla:...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989339)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989339 advisory. In the Linux kernel, the following vulnerability has been resolved: arm64: ftrace: consistently handle PLTs. Sometimes it is necessary to use a PLT entry to call an...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990014)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990014 advisory. In the Linux kernel, the following vulnerability has been resolved: um: ubd: Do not use drvdata in release The drvdata is not available in release. Let's just use...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989621)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989621 advisory. In the Linux kernel, the following vulnerability has been resolved: iavf: free qvectors before queues in iavfdisablevf iavffreequeues clears adapter-numactivequeues,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989694)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989694 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: fix panic on out-of-bounds guest IRQ As guestirq is coming from KVMIRQFD API call, it m...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988795)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988795 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: core: Put LLD module refcnt after SCSI device is released SCSI host release is triggered wh...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989324)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989324 advisory. In the Linux kernel, the following vulnerability has been resolved: ixgbe: Add locking to prevent panic when setting sriovnumvfs to zero It is possible to disable VF...