Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142551)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142551 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: host: max3421: Fix shift-out-of-bounds in max3421hubcontrol The max3421hubcontrol function...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142502)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142502 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI: Check ROM header and data structure addr before accessing We meet a crash when running...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143073)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143073 advisory. In the Linux kernel, the following vulnerability has been resolved: smb/client: handle overlapping allocated ranges in fallocate smb3simplefallocaterange can skip...

XonshActivator Code Execution

The vulnerability of the quote function in the XonshActivator class, a tool for creating isolated virtual environments in Python’s virtualenv, is related to improper code generation due to the use of outdated multi-byte encoding. Exploiting this vulnerability could allow an attacker to execute...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143091)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143091 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: fix two unsafe bare decodes in decodelockers decodelockers in clslockclient.c contains t...

SUSE SLED15: libpython3_6m1_0 / python3 / python3-base / python3-curses / etc (SUSE-SU-2026:4754-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4754-1 advisory. Security issues fixed: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration...

vvdecapp Heap Buffer Overflow DoS

The vulnerability of the deleteSEI function in the vvdecapp VVdeC component is related to reading data beyond the buffer limit. Exploiting this vulnerability could allow an attacker to cause a service failure or gain access to protected information...

CentOS Linux 7 [TuxCare] Security Update: rsync (CENTOS7:CLSA-2026:1792582985)

The CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1792582985 advisory. - rsync 3.2.5 before 3.5.0 contains a heap out-of-bounds write vulnerability that allows remote unauthenticated attackers to write one...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142473)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142473 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackirc: fix parsedcc off-by-one OOB read parsedcc treats dataend as an inclusi...

dhcpcd parse_option() DoS

The vulnerability of the parseoption function in the DHCP server dhcpcd is related to the use of pointers. Exploiting this vulnerability could allow an attacker to trigger a service failure...

vvdecapp Decoder Heap Use-After-Free

The vulnerability of the createSubPicRefBufs function in the vvdecapp VVdeC decoder lies in the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

vvdec Coding Structure Buffer Overflow DoS

The vulnerability of the vvdec::CodingStructure::getColInfovvdec::Position decoder vvdecapp VVdeC function is related to the occurrence of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Rocky Linux 10.2 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_85321)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202685321 advisory. kernel: openvswitch: defer tunnel netdevput to RCU release CVE-2026-31678 kernel: xfrm: espintcp: do not reuse an in-progress partial send CVE-2026-529...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143122)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143122 advisory. In the Linux kernel, the following vulnerability has been resolved: i40e: add validation for ringlen param The ringlen parameter provided by the virtual function VF ...

PT-2026-121420

Name of the Vulnerable Software and Affected Versions GraphQL-core versions 3.0.0 through 3.2.11 GraphQL-core versions 3.3.0rc0 and earlier Description An unauthenticated remote attacker can cause a denial of service by submitting a shallow, highly compressible GraphQL query. The issue exists in...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142501)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142501 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: fix OOB read in decodewatchers via missing bounds check cephstartdecoding validates that...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142547)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142547 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: fix two unsafe bare decodes in decodelockers decodelockers in clslockclient.c contains t...

vvdecapp Heap Buffer Overflow DoS

The vulnerability of the isRefScaled function in the vvdecapp VVdeC component relates to reading data beyond the buffer limit. Exploiting this vulnerability could allow an attacker to cause a service failure or gain access to protected information...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143032)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143032 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw-nuss: Fix portid extraction from SRC TAG On the packet reception pat...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142733)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142733 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/percpu-km: fix bitmap overflow and accounting in pcpucreatechunk In pcpucreatechunk, nrpages i...