CVE-2026-86219

Authen::SASL::Perl::DIGESTMD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in serverstep. serverstart generates a fresh nonce and sends it in the challenge, and nothing later compares that value against the nonce the client returns. serverstep...

CVE-2026-86219 Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_step

Authen::SASL::Perl::DIGESTMD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in serverstep. serverstart generates a fresh nonce and sends it in the challenge, and nothing later compares that value against the nonce the client returns. serverstep...

libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks

An integer overflow in the libxml2 xmlIO module occurs when data backlogs exceed maximum integer limits. This flaw passes negative length values to downstream write callbacks, creating an unsafe state that can lead to data corruption or compromise application confidentiality and integrity...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053322)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053322 advisory. In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix possible use-after-free issue in ftracelocation KASAN reports a bug: BUG: KASAN:...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053267)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053267 advisory. In the Linux kernel, the following vulnerability has been resolved: iio: adc: at91-sama5d2adc: Fix potential use-after-free in sama5d2adc driver at91adcinterrupt can...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-105454)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105454 advisory. In the Linux kernel, the following vulnerability has been resolved: gtp: fix a potential NULL pointer dereference When sockfdlookup fails, gtpencapenablesocket retur...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053396)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053396 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix slab-use-after-free due to dangling pointer dqipriv When mounting ocfs2 and then...

Linux Distros Unpatched Vulnerability : CVE-2026-86219

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Authen::SASL::Perl::DIGESTMD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in serverstep. serverstart generates...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053256)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053256 advisory. In the Linux kernel, the following vulnerability has been resolved: bcache: fix NULL pointer in cachesetflush 1. LINE1794 - LINE1887 is some codes about function of...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053325)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053325 advisory. In the Linux kernel, the following vulnerability has been resolved: nvme-fc: do not wait in vain when unloading module The module exit path has race between deleting...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053244)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053244 advisory. In the Linux kernel, the following vulnerability has been resolved: ax25: Fix reference count leak issue of netdevice There is a reference count leak issue of the...

OESA-2026-3651 erlang security update

Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson. Security Fixes: Allocation of Resources Without Limits or Throttling...

CVE-2026-86184

Lara Dashboard before 1.3.0 contains an authentication bypass vulnerability in the screenshot-login route that allows unauthenticated attackers to authenticate as any user by email when APPENV is not production. Attackers can request the GET /screenshot-login/email endpoint with a registered emai...

[SECURITY] Fedora 44 Update: perl-DBD-Pg-3.21.2-1.fc44

DBD::Pg is a Perl module that works with the DBI module to provide access to PostgreSQL databases...

parsedmarc v11.0.1

parsedmarc parsedmarc is a Python module and CLI utility for parsing DMARC reports. When used with Elasticsearch and Kibana or Splunk, or with OpenSearch and Grafana, it works as a self-hosted open-source alternative to commercial DMARC report processing services such as Agari Brand Protection,...

Linux Distros Unpatched Vulnerability : CVE-2026-80753

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ovpn: run deferred work on a module-owned workqueue ovpn queues several work items whose callbacks execute module text. These works currently run on the global...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data Vulnerability Details CVEID:CVE-2026-42945 DESCRIPTION: NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when the rewrite...

AZL-99579 CVE-2026-80906 affecting package kernel 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: net: packet: fix wrong transportheader when sending VLAN-tagged frame In packetparseheaders, when processing a VLAN-tagged frame, skbsetnetworkheader is called to advance networkheader past the VLAN tag to the inner protocol...

kernel: net: bridge: stop fast-leave after deleting a port group

A flaw was found in the Linux kernel's network bridge module. When handling multicast fast-leave, a vulnerability exists where the system may attempt to access a port group after it has been deleted. This can occur if multicast-to-unicast was previously enabled and then disabled, leading to a sta...

AZL-99569 CVE-2026-80851 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: gtp: serialize PDP context updates PDP contexts can be deleted through GTPCMDDELPDP or while the GTP network device is being unregistered. The latter is serialized by RTNL, but the generic-netlink delete path only holds RCU...