Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by a weak cryptographic algorithm vulnerability due to Paramiko

Summary Paramiko is used by IBM Integrated Analytics System as a Python library providing SSH protocol implementation for secure connections. CVE-2026-44405 affects Paramiko through version 4.0.0, where the rsakey.py module allows the use of the SHA-1 algorithm, which is considered...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: struts (UTSA-2026-031330)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-031330 advisory. The MultiPageValidator implementation in Apache Struts 1 1.1 through 1.3.10 allows remote attackers to bypass intended access restrictions via a modified page...

Ubuntu 20.04 LTS / 22.04 LTS / Pro Realtime 22.04 LTS : Linux kernel vulnerabilities (USN-8658-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / Pro Realtime 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8658-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: struts (UTSA-2026-031329)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-031329 advisory. ActionServlet.java in Apache Struts 1 1.x through 1.3.10 mishandles multithreaded access to an ActionForm instance, which allows remote attackers to execute arbitrar...

Ubuntu 24.04 LTS / Pro Realtime 24.04 LTS : Linux kernel (NVIDIA) vulnerabilities (USN-8669-1)

"The remote Ubuntu 24.04 LTS / Pro Realtime 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8669-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. Thi...

Ubuntu 24.04 LTS / 26.04 LTS / Pro Realtime 24.04 LTS : Linux kernel (NVIDIA) vulnerabilities (USN-8663-1)

"The remote Ubuntu 24.04 LTS / 26.04 LTS / Pro Realtime 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8663-1 advisory. It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. ...

PT-2026-82160

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The zcrypt msgtype6 send ep11 cprb function uses fragile struct overlays to access and modify the domain field in the EP11 CPRB payload. This approach assumes a fixed payload structure a...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-8666-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8666-1 advisory. Siebe Devroe, Hlose Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated...

CVE-2026-80544: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing The zcryptmsgtype6sendep11cprb function uses fragile struct overlays to access and modify the domain field in the EP11 CPRB payload, creating maintainability and...

Linux Distros Unpatched Vulnerability : CVE-2026-80544

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing The...

MiracleLinux 8 : python-pyasn1-0.3.7-6.el8_10.2 (AXSA:2026-1657:04)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1657:04 advisory. pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values CVE-2026-59886 Tenable has extracted the preceding description block directly from the...

Ubuntu 22.04 LTS / Pro Realtime 22.04 LTS : Linux kernel (HWE) vulnerabilities (USN-8656-1)

The remote Ubuntu 22.04 LTS / Pro Realtime 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8656-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This...

Ubuntu 24.04 LTS / Pro Realtime 24.04 LTS : Linux kernel (Raspberry Pi) vulnerabilities (USN-8665-1)

"The remote Ubuntu 24.04 LTS / Pro Realtime 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8665-1 advisory. It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative...

openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

A flaw was found in OpenSSL. An integer truncation vulnerability in the ASN.1 decoder can occur when processing a crafted DER-encoded ASN.1 structure with a primitive element exceeding 2 gigabytes. A remote attacker could exploit this to cause a heap buffer over-read. This may lead to an...

openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

A flaw was found in OpenSSL. An integer truncation vulnerability in the ASN.1 decoder can occur when processing a crafted DER-encoded ASN.1 structure with a primitive element exceeding 2 gigabytes. A remote attacker could exploit this to cause a heap buffer over-read. This may lead to an...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference due to insufficient type checking in osslcmpcalcprotection in crypto/cmp/cmpprotect.c. An attacker can crash a CMP server or client by sending a crafted PBM-protected message whose protectionAlg parameter uses t...

CLSA-2026-1787668126 TuxCare security update for 3 packages (3 CVEs)

TuxCare rebuilt 3 packages to address 3 CVEs. Fixed in 6.30.4-tuxcare.1...

CVE-2026-63076

Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before treating it as a PBMParameter. A crafted message can contain a parameter of a different type, which is then dereferenced as an invalid...

AZL-97941 CVE-2026-63076 affecting package openssl for versions less than 3.3.7-6

Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before treating it as a PBMParameter. A crafted message can contain a parameter of a different type, which is then dereferenced as an invalid...

AZL-97674 CVE-2026-63076 affecting package openssl-fips-provider 3.1.2-2

Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before treating it as a PBMParameter. A crafted message can contain a parameter of a different type, which is then dereferenced as an invalid...