Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011117)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011117 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: ipr: Fix WARNING in iprinit iprinit will not call unregisterrebootnotifier when...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010929)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010929 advisory. In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: fix memory leak in dvbusbadapterinit Syzbot reports a memory leak in...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011360)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011360 advisory. In the Linux kernel, the following vulnerability has been resolved: regmap: slimbus: fix buscontext pointer in regmap init calls Commit 4e65bda8273c ASoC: wcd934x: f...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011289)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011289 advisory. In the Linux kernel, the following vulnerability has been resolved: gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611connectorinit A NULL check for...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010903)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010903 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: Fix null ptr access in adrenogpucleanup Fix the below kernel panic due to null...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-006962)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006962 advisory. In the Linux kernel, the following vulnerability has been resolved: testfirmware: fix memory leak in testfirmwareinit When miscregister failed in testfirmwareinit, t...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010986)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010986 advisory. In the Linux kernel, the following vulnerability has been resolved: ARM: OMAP2+: Fix memory leak in realtimecounterinit The sysclk resource is malloced by clkget, it...

EUVD-2026-23697

A security flaw has been discovered in kodcloud KodExplorer up to 4.52. Affected is the function initInstall of the file /app/controller/systemMember.class.php. Performing a manipulation of the argument path results in authorization bypass. The attack may be initiated remotely. The exploit has be...

CVE-2026-6568 kodcloud KodExplorer Public Share share.class.php initShareOld path traversal

A vulnerability was determined in kodcloud KodExplorer up to 4.52. This affects the function share.class.php::initShareOld of the file /app/controller/share.class.php of the component Public Share Handler. This manipulation of the argument path causes path traversal. The attack can be initiated...

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: cargo-audit, py3-xet-core, linkerd2, lychee, tealdeer, sdp-k8s-injector, samply, shadowsocks-rust, wasmtime, buck2, rye, berg, sqlx, kdash, zizmor, linkerd-network-validator, deno, sccache, zellij, uv, qdrant, wasm-pack, wasmcloud, ztunnel, xh, ntpd-rs, pixi, zola,...

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: cargo-audit, py3-xet-core, linkerd2, lychee, tealdeer, sdp-k8s-injector, samply, shadowsocks-rust, wasmtime, buck2, rye, berg, sqlx, kdash, zizmor, linkerd-network-validator, deno, sccache, zellij, uv, qdrant, wasm-pack, wasmcloud, ztunnel, xh, ntpd-rs, pixi, zola,...

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: deno, linkerd2, atuin, zola, pixi, kdash, linkerd2-proxy, sentry-cli, ntpd-rs, wasmcloud, buck2, linkerd2-cni-plugin, ztunnel, zizmor, rye, qdrant, wasm-pack, wasmtime, xh, ztunnel-fips, garage, lakekeeper, linkerd-extension-init, sqlx, tealdeer, parseable, lychee,...

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: deno, linkerd2, atuin, zola, pixi, kdash, linkerd2-proxy, sentry-cli, ntpd-rs, wasmcloud, buck2, linkerd2-cni-plugin, ztunnel, zizmor, rye, qdrant, wasm-pack, wasmtime, xh, ztunnel-fips, garage, lakekeeper, linkerd-extension-init, sqlx, tealdeer, parseable, lychee,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007265)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007265 advisory. In the Linux kernel, the following vulnerability has been resolved: media: ttpci: fix two memleaks in budgetavattach When saa7146registerdevice and saa7146vvinit...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007378)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007378 advisory. In the Linux kernel, the following vulnerability has been resolved: ARM: zynq: Fix refcount leak in zynqearlyslcrinit offindcompatiblenode returns a node pointer wit...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007341)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007341 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix memory leak in ocfs2stackglueinit ocfs2tableheader should be free in ocfs2stackglueini...

MAL-2026-2891 Malicious code in chai-as-init (npm)

chai-as-init is a malicious npm package that when imported downloads a C2 dropper from https://api.npoint.io/c2e881b8bc0fe2121454 and executes it similar to malware in to chai-await-test. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector...

GHSA-HW5X-4R37-72W7 OpenTofu has unbounded memory usage, high CPU usage, or deadlock in "tofu init" with maliciously-crafted dependency responses

Impact Unauthenticated denial of service. Summary When installing module packages from attacker-controlled sources, tofu init may use unbounded memory, cause high CPU usage, or deadlock when encountering maliciously-crafted TLS certificate chains or tar archives. Those who depend on modules or...

Amazon Linux 2 : ecs-init, --advisory ALAS2ECS-2026-101 (ALASECS-2026-101)

"The version of ecs-init installed on the remote host is prior to 1.102.2-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2026-101 advisory. url.Parse insufficiently validated the host/authority component and accepted some invalid URLs. CVE-2026-25679 On Un...

PT-2026-32951

Name of the Vulnerable Software and Affected Versions libsixel versions prior to 1.8.7-r1 Description A use-after-free issue exists in the sixel encoder encode bytes function. The sixel frame init function stores the caller-owned pixel buffer pointer directly in frame-pixels without creating a...