UBUNTU-CVE-2026-78126

strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin...

UBUNTU-CVE-2026-78130

strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser...

CVE-2026-70459

A flaw was found in rsync. A remote attacker could send a specially crafted file list to the rsync daemon. This could lead to a null pointer dereference, causing the daemon to crash and resulting in a Denial of Service DoS. Mitigation To mitigate this issue, restrict network access to the rsync...

Security update for openssl-3-livepatches

This update for openssl-3-livepatches fixes the following issues: CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate bsc1275145, bsc1274792. CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1275133, bsc1274788. CVE-2026-63076: invalid point...

SUSE-SU-2026:4039-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: August 2026 release. - CVE-2026-14456: unbounded memory growth in QUIC server incoming channel queue bsc1274791. - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate bsc1274792. - CVE-2026-18798: QUI...

Security update for openssl-3-livepatches

This update for openssl-3-livepatches fixes the following issues: CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate bsc1275145, bsc1274792. CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1275133, bsc1274788. CVE-2026-63076: invalid point...

SUSE-SU-2026:4038-1 Security update for openssl-3-livepatches

This update for openssl-3-livepatches fixes the following issues: - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate bsc1275145, bsc1274792. - CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1275133, bsc1274788. - CVE-2026-63076: invalid...

SUSE-SU-2026:4032-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: August 2026 release. - CVE-2026-54874: excessive memory use buffering DTLS records for a future epoch bsc1274795. - CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1274788. - CVE-2026-63074: CMP indefinite cache growth of...

Linux Distros Unpatched Vulnerability : CVE-2026-80813

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet: fix NULL pointer dereference in nvmetexecuteidentifynslist When a host issues an Identify command with CNS 07h Active Namespace ID List for a specific I/...

The vulnerability of the ovpn_net_xmit() function in the drivers/net/ovpn/io.c module of the Linux kernel’s network device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ovpnnetxmit function in the drivers/net/ovpn/io.c module of the Linux kernel’s network device driver is related to the pointer being dereferenced after its expiration time. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

Linux Distros Unpatched Vulnerability : CVE-2026-80816

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: FCP: Use a private URB for the notification endpoint fcpinitnotify used mixer-urb, which sndusbmixerstatuscreate allocates for the optional UAC2 status...

Debian dsa-6487 : charon-cmd - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6487 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6487-1 [email protected] https://www.debian.org/securit...

libxml2: libxml2: Denial of Service due to NULL pointer dereference in xmlRegNewParserCtxt

A NULL pointer dereference in libxml2's xmlRegNewParserCtxt function allows a local attacker to cause a denial of service DoS. The flaw occurs when strlen is called on an unverified pointer following a failed xmlStrdup memory allocation, resulting in a process crash...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053405)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053405 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: update sjournalinum if it changes after journal replay When mounting a crafted ext4 image,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053208)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053208 advisory. In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt2701: Add check for mtkallocclkdata Add the check for the return value of...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053264)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053264 advisory. In the Linux kernel, the following vulnerability has been resolved: iio: accel: bmc150: Fix irq assumption regression The code in bmc150-accel-core.c unconditionally...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053259)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053259 advisory. In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt6797: Add check for mtkallocclkdata Add the check for the return value of...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053320)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053320 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Update intermediate power state for SI Update the current state as boot state during...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073359)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073359 advisory. In the Linux kernel, the following vulnerability has been resolved: xfs: fail recovery on a committed log item with no regions If the first op of a transaction is a...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053442)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053442 advisory. In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: Check the DVFS OPP count returned by the firmware Fix a kernel crash with the...