Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-395064)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-395064 advisory. In the Linux kernel, the following vulnerability has been resolved: net: lapb: increase LAPBHEADERLEN It is unclear if net/lapb code is supposed to be ready for 8021...

EUVD-2025-31894

Malicious code in bioql PyPI...

EUVD-2023-52805

Malicious code in bioql PyPI...

EUVD-2022-6758

Malicious code in bioql PyPI...

EUVD-2025-5451

Malicious code in bioql PyPI...

EUVD-2025-20026

Malicious code in bioql PyPI...

EUVD-2025-25333

Malicious code in bioql PyPI...

EUVD-2022-54911

Malicious code in bioql PyPI...

AZL-75107 CVE-2023-53509 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: qed: allow sleep in qedmcptracedump By default, qedmcpcmdandunion delays 10us at a time in a loop that can run 500K times, so calls to qedmcpnvmrdcmd may block the current thread for over 5s. We observed thread scheduling delays...

CLSA-2025-1759167661 git: Fix of CVE-2025-46835

CVE-2025-46835: prevent malicious creating and overwriting of user's files...

CVE-2023-53431

The CVE-2023-53431 entry concerns Linux kernel SCSI SES: the fix ensures graceful handling when an enclosure has a primary component but no secondary components. Previously, devices with one primary enclosure and zero secondary enclosures could cause ses_intf_add() to bail, potentially triggering...

UBUNTU-CVE-2023-53397

In the Linux kernel, the following vulnerability has been resolved: modpost: fix off by one in isexecutablesection The comparison should be = to prevent an out of bounds array access...

CVE-2025-39795 block: avoid possible overflow for chunk_sectors check in blk_stack_limits()

In the Linux kernel, the following vulnerability has been resolved: block: avoid possible overflow for chunksectors check in blkstacklimits In blkstacklimits, we check that the t-chunksectors value is a multiple of the t-physicalblocksize value. However, by finding the chunksectors value in bytes...

UBUNTU-CVE-2025-39763

In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered If a synchronous error is detected as a result of user-space process triggering a 2-bit uncorrected error, the CPU will take a synchronous error...

kasan: remove kasan_find_vm_area() to prevent possible deadlock

...

vmci: Prevent the dispatching of uninitialized payloads

...

dlm: prevent NPD when writing a positive value to event_done

...

Security update for munge

This update for munge fixes the following issues: Make logrotate work on log as user munge to prevent local privilege escalation bsc1246088. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you ca...

CVE-2025-53561

CVE-2025-53561: Path traversal vulnerability in WordPress plugin Prevent files / folders access (

CVE-2025-53561 WordPress Prevent files / folders access Plugin <= 2.6.0 - Path Traversal Vulnerability

Path Traversal: '.../...//' vulnerability in miniOrange Prevent files / folders access prevent-file-access allows Path Traversal.This issue affects Prevent files / folders access: from n/a through = 2.6.0...