Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001459)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001459 advisory. The bpf verifier in the Linux kernel did not properly handle mod32 destination register truncation when the source register was known to be 0. A local attacker with...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000937)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000937 advisory. fs/btrfs/inode.c in the Linux kernel before 4.3.3 mishandles compressed inline extents, which allows local users to obtain sensitive pre-truncation information from ...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003135)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003135 advisory. The TCP stack in the Linux kernel before 4.8.10 mishandles skb truncation, which allows local users to cause a denial of service system crash via a crafted applicati...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003006)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003006 advisory. kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service memory corruption or possibly have unspecified other impact ...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003364)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003364 advisory. A security flaw was found in the Linux kernel in a way that the cleancache subsystem clears an inode after the final file truncation removal. The new file created wi...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003019)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003019 advisory. A security flaw was found in the Linux kernel in a way that the cleancache subsystem clears an inode after the final file truncation removal. The new file created wi...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002332)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002332 advisory. fs/btrfs/inode.c in the Linux kernel before 4.3.3 mishandles compressed inline extents, which allows local users to obtain sensitive pre-truncation information from ...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002706)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002706 advisory. kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service memory corruption or possibly have unspecified other impact ...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003147)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003147 advisory. An issue was discovered in the Linux kernel before 4.8. Incorrect access checking in overlayfs mounts could be used by local attackers to modify or truncate files in...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003335)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003335 advisory. The TCP stack in the Linux kernel before 4.8.10 mishandles skb truncation, which allows local users to cause a denial of service system crash via a crafted applicati...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002740)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002740 advisory. In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data type of size, allocation size gets truncated...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001804)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001804 advisory. fs/btrfs/inode.c in the Linux kernel before 4.3.3 mishandles compressed inline extents, which allows local users to obtain sensitive pre-truncation information from ...

[slackware-security] libpng

New libpng packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libpng-1.6.54-i586-1slack15.0.txz: Upgraded. This update fixes security issues: Heap buffer over-read in the libpng simplified API...

LIBPNG has an integer truncation causing heap buffer over-read in png_image_write_*

...

ROS-20260114-7318

A vulnerability in the iomapwritedelallocscan function of the Linux kernel is related to the execution of a loop with an unreachable exit condition as a result of numeric truncation. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

CLSA-2026-1768314331 ruby: Fix of CVE-2025-27221

CVE-2025-27221: fix credential leak by correctly truncating userinfo...

MiracleLinux 9 : php-8.0.30-3.el9_6 (AXSA:2025-10450:05)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10450:05 advisory. php: Header parser of http stream wrapper does not handle folded headers CVE-2025-1217 php: Stream HTTP wrapper header check might omit basic auth...

MiracleLinux 8 : mingw-sqlite-3.26.0.0-2.el8_10 (AXSA:2025-10765:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10765:01 advisory. sqlite: Integer Truncation in SQLite CVE-2025-6965 Tenable has extracted the preceding description block directly from the MiracleLinux security advisory...

MiracleLinux 9 : php:8.1 (AXSA:2025-9901:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-9901:01 advisory. php: Leak partial content of the heap through heap buffer over-read in mysqlnd CVE-2024-8929 php: Single byte overread with...

MiracleLinux 9 : sqlite-3.34.1-9.el9_7 (AXSA:2025-11450:04)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-11450:04 advisory. sqlite: Integer Truncation in SQLite CVE-2025-6965 Tenable has extracted the preceding description block directly from the MiracleLinux security advisory...