Unity Linux 20.1070e Security Update: elfutils (UTSA-2026-099529)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099529 advisory. A vulnerability, which was classified as problematic, has been found in GNU elfutils 0.192. This issue affects the function gelfgetsymshndx of the file strip.c of th...

openSUSE 16: git-cliff / git-cliff-bash-completion / git-cliff-fish-completion / etc (openSUSE-SU-2026:21584-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21584-1 advisory. Changes in git-cliff: - Update to version 2.13.1: Support more configuration file locations Add per-commit statistics Expose determined bump typ...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100136)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100136 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: xhci: tegra: fix sleep in atomic call When we set the dual-role port to Host mode, we observ...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100709)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100709 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix memory leak in ext4extshiftextents In ext4extshiftextents, if the extent is NULL in the...

Unity Linux 20.1070e Security Update: libxml2 (UTSA-2026-099459)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099459 advisory. libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershell function processes user input...

The vulnerability of the snd_cx88_hw_params() function of the cx88 component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the sndcx88hwparams function in the cx88 component of the Linux operating system involves the failure to release resources after their useful life has expired. Exploiting this vulnerability can allow an attacker to cause service failures...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099908)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099908 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ftgmac100: fix ring allocation unwind on open failure ftgmac100allocrings allocates rxskbs,...

Unity Linux 20.1070e Security Update: ghostscript (UTSA-2026-099527)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099527 advisory. A vulnerability was found in Artifex GhostPDL up to 3989415a5b8e99b9d1b87cc9902bde9b7cdea145. It has been classified as problematic. This affects the function...

The vulnerability of the rto_next_cpu() function in the sched/rt.c component of the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the rtonextcpu function in the sched/rt.c component of the Linux kernel’s firmware is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-73242

APR-util versions 1.6.3 and earlier function apr password validate was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via a side channel timing attack particularly on platforms without crypt such as Windows, BeOS, NetWare, or Android. Users ar...

Important: firefox

Issue Overview: Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13. CVE-2026-16349 Incorrect boundary conditions in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 153, Firef...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: Drop the lock in skbmaytxtimestamp CVE-2026-43216 In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: strictly check for maximum number of actions CVE-2026-43329 In the...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: reject zero filehandle version count CVE-2026-53392 In the Linux kernel, the following vulnerability has been resolved: nfsd: reset write verifier on deferred writeback errors CVE-2026-53393 In th...

CVE-2026-67965

Tenda W20E V5.0 firmware US_W20EV5.0qu_V16.01.0.6(2782)_CN&EN_TDE01.bin exposes url_need_login to bypass authentication when the admin password is empty (factory default), enabling unauthenticated activation of /goform/ate — an AES-128-CBC backdoor on UDP/7329 using hardcoded key Tenda0123456789M...

ROS-20260817-73-0219

The vulnerability of the X509VERIFYPARAMadd0policy function in the OpenSSL library is related to errors in the certificate validation process. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” attack...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100300)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100300 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-lpspi: fix teardown order issue UAF There is a teardown order issue in the driver. T...

Unity Linux 20.1070a Security Update: poppler (UTSA-2026-099553)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099553 advisory. A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, triggers an...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100713)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100713 advisory. In the Linux kernel, the following vulnerability has been resolved: 6lowpan: fix off-by-one in multicast context address compression The second memcpy in...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100543)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100543 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: fix OOB write to userspace in sctpgetsockoptpeerauthchunks sctpgetsockoptpeerauthchunks...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100295)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100295 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cryptmessage when using async crypto The CVE-2024-50047 fix...