Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003767)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003767 advisory. In the Linux kernel before 5.1.7, a device can be tracked by an attacker using the IP ID values the kernel produces for connection-less protocols e.g., UDP and ICMP...

📄 AVideo Notify.ffmpeg.json.php Unauthenticated Remote Code Execution

This Metasploit module exploits an unauthenticated remote code execution vulnerability in the AVideos notify.ffmpeg.json.php endpoint. The vulnerability stems from a critical cryptographic weakness in the salt generation mechanism combined with information disclosure vulnerabilities that allow an...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000905)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000905 advisory. The xfsda3fixhashpath function in fs/xfs/xfsdabtree.c in the xfs implementation in the Linux kernel before 3.14.2 does not properly compare btree hash values, which...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001027)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001027 advisory. The crypto API in the Linux kernel through 3.9-rc8 does not initialize certain length variables, which allows local users to obtain sensitive information from kernel...

openSUSE 16 Security Update : gpg2 (openSUSE-SU-2026:20029-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20029-1 advisory. - CVE-2025-68973: out-of-bounds write when processing specially crafted input in the armor parser can lead to memory corruption bsc1255715. Other securi...

MiracleLinux 7 : kernel-3.10.0-327.22.2.el7 (AXSA:2016-613:04)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-613:04 advisory. Security issues fixed with this release: CVE-2015-8767 net/sctp/smsideeffect.c in the Linux kernel before 4.3 does not properly manage the relationsh...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002598)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002598 advisory. An issue was discovered in xenvifsethashmapping in drivers/net/xen-netback/hash.c in the Linux kernel through 4.18.1, as used in Xen through 4.11.x and other product...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002693)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002693 advisory. An issue was discovered in xenvifsethashmapping in drivers/net/xen-netback/hash.c in the Linux kernel through 4.18.1, as used in Xen through 4.11.x and other product...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003151)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003151 advisory. The hashaccept function in crypto/algifhash.c in the Linux kernel before 4.3.6 allows local users to cause a denial of service OOPS by attempting to trigger use of...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003406)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003406 advisory. The HMAC implementation crypto/hmac.c in the Linux kernel before 4.14.8 does not validate that the underlying cryptographic hash algorithm is unkeyed, allowing a loc...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002290)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002290 advisory. The xfsda3fixhashpath function in fs/xfs/xfsdabtree.c in the xfs implementation in the Linux kernel before 3.14.2 does not properly compare btree hash values, which...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002087)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002087 advisory. The CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local users to cause a denial of service extended runtime of kernel code by...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002915)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002915 advisory. The hashaccept function in crypto/algifhash.c in the Linux kernel before 4.3.6 allows local users to cause a denial of service OOPS by attempting to trigger use of...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001829)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001829 advisory. The xfsda3fixhashpath function in fs/xfs/xfsdabtree.c in the xfs implementation in the Linux kernel before 3.14.2 does not properly compare btree hash values, which...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001843)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001843 advisory. The CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local users to cause a denial of service extended runtime of kernel code by...

CVE-2025-71078

A Segment Lookaside Buffer SLB multi-hit error vulnerability was found in the Linux kernel's PowerPC 64-bit hash MMU implementation. When a process migrates between CPUs without triggering switchmmucontext because prev and next mmstruct are the same, the hardware SLB and software preload cache ca...

CVE-2025-68702

Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, Jervis uses padLeft32, '0' when it should use padLeft64, '0' because SHA-256 produces 32 bytes which equates to 64 hex characters. This vulnerability is fixed in 2.2...

CVE-2025-68703

Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, the salt is derived from sha256Sumpassphrase. Two encryption operations with the same password will have the same derived key. This vulnerability is fixed in 2.2...

[SECURITY] [DLA 4437-1] gnupg2 security update

Debian LTS Advisory DLA-4437-1 [email protected] https://www.debian.org/lts/security/ Roberto C. Sánchez January 14, 2026 https://wiki.debian.org/LTS Package : gnupg2 Version : 2.2.27-2+deb11u3 CVE ID : CVE-2025-68973 Debian Bug : 1124221 Several issues have been discovered in gnupg2, a...

SUSE-SU-2026:20356-1 Security update for gpg2

This update for gpg2 fixes the following issues: - CVE-2025-68973: out-of-bounds write when processing specially crafted input in the armor parser can lead to memory corruption bsc1255715. Other security fixes: - gpg: Avoid potential downgrade to SHA1 in 3rd party key signatures bsc1256246. - gpg...