Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101983)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101983 advisory. In the Linux kernel, the following vulnerability has been resolved: net: pull headers in qdiscpktlensegsinit Most ndostartxmit methods expects headers of gso packet...

Linux Distros Unpatched Vulnerability : CVE-2026-72090

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/amdxdna: Use caller client for debug BO sync amdxdnadrmsyncboioctl looks up args-handle in the ioctl caller's drmfile. For SYNCDIRECTFROMDEVICE, it then...

Linux Distros Unpatched Vulnerability : CVE-2026-72061

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: sit: require CAPNETADMIN in the device netns for changelink ipip6changelink operates on at most two netns, devnetdev and the tunnel link netns t-net. They...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101987)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101987 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: reject root items with dropprogress and zero droplevel BUG When recovering relocation at...

Linux Distros Unpatched Vulnerability : CVE-2026-68517

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, the corsorigins guard in glances/outputs/glancesrestfulapi.py uses exact list...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101988)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101988 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: Handle probe errors properly The probe procedure of setupcard in caiaq driver doesn'...

Linux Distros Unpatched Vulnerability : CVE-2026-72067

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpu: hotplug: Preserve per instance callback errors cpuhpinvokecallback unwinds earlier callbacks for the same hotplug state when one instance fails. The rollba...

Amazon Linux 2023 : perl-Date-Manip (ALAS2023-2026-2050)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2050 advisory. Date::Manip versions through 6.99 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric range tests in check. The parse regexes capture year, month and day with th...

Linux Distros Unpatched Vulnerability : CVE-2026-54284

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, TokenList construction and string conversion in sqlparse/sql.py repeatedly flatten...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101964)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101964 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: always detect conflicting inodes when logging inode refs After rename exchanging either...

Debian dsa-6446 : expat - security update

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6446 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6446-1 [email protected] https://www.debian.org/security/ Aron X...

Linux Distros Unpatched Vulnerability : CVE-2026-72128

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet: fix refcount leak in nvmetsqcreate In nvmetsqcreate, a reference on the ctrl is taken via krefgetunlesszero before calling nvmetchecksqid. If...

Linux Distros Unpatched Vulnerability : CVE-2026-72103

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm: avoid leaking the caller's thread keyring via the table device file The refactoring in commit a28d893eb327 md: port block device access to file accidentally...

Linux Distros Unpatched Vulnerability : CVE-2026-72133

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: uniphier: Fix completion initialization order before devmrequestirq The driver calls devmrequestirq before initializing the completion used by the interrup...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102123)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102123 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: stop parsing UAC2 rates at MAXNRRATES parseuac2sampleraterange caps the number o...

Linux Distros Unpatched Vulnerability : CVE-2026-72091

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/amdxdna: reject user command submission without a command BO amdxdnadrmsubmitexecbuf passes the user-supplied command BO handle straight into...

Amazon Linux 2 : perl-Date-Manip, --advisory ALAS2-2026-3856 (ALAS-2026-3856)

The version of perl-Date-Manip installed on the remote host is prior to 6.41-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3856 advisory. Date::Manip versions through 6.99 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeri...

Amazon Linux 2 : perl-Net-DNS, --advisory ALAS2-2026-3855 (ALAS-2026-3855)

The version of perl-Net-DNS installed on the remote host is prior to 0.72-6. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3855 advisory. Net::DNS versions through 1.55 for Perl allow Denial of Service via deep DNS compression pointer chains...

Linux Distros Unpatched Vulnerability : CVE-2026-71491

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, groupcomments in sqlparse/engine/grouping.py repeatedly rescans comment-only statemen...

Linux Distros Unpatched Vulnerability : CVE-2026-75006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, insufficient Cascading Style Sheets CSS sanitization in HTML e-mail messages may lead to SSRF or...