Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007604)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007604 advisory. In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix null-ptr-deref in blocktouchbuffer tracepoint Patch series nilfs2: fix null-ptr-deref...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007563)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007563 advisory. In the Linux kernel, the following vulnerability has been resolved: blk-mq: cancel blk-mq dispatch work in both blkcleanupqueue and diskrelease For avoiding to slow...

Unity Linux 20.1050e / 20.1060e Security Update: kernel (UTSA-2026-007346)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007346 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: do not assert we found block group item when creating free space tree Currently, when...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007337)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007337 advisory. In the Linux kernel, the following vulnerability has been resolved: nbd: call genlunregisterfamily first in nbdcleanup Otherwise there may be race between module...

CVE-2026-28214: Integer Overflow or Wraparound

Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the ClumpletReader::getClumpletSize function can overflow the totalLength value when parsing a Wide type clumplet, causing an infinite loop. An authenticated user with INSERT privileges...

com.ritense.valtimo:audit (>=13.0.0.release, <=13.21.0.release), com.ritense.valtimo:besluiten-api (>=13.0.0.release, <=13.21.0.release) +63 more potentially affected by CVE-2026-34164 via com.ritense.valtimo:inbox (>=13.0.0.release, <=13.21.0.release)

com.ritense.valtimo:inbox MAVEN version =13.0.0.release, =13.0.0.release, =13.0.0.release, =13.13.0.release, =13.0.0.release, =13.0.0.release, =13.0.0.release, =13.0.0.release, =13.0.0.release, =13.0.0.release, =13.0.0.release, =13.0.0.release, =13.0.0.release, =13.0.0.release, =13.0.0.release,...

com.ritense.valtimo:audit (>=13.0.0.release, <=13.21.0.release), com.ritense.valtimo:besluiten-api (>=13.0.0.release, <=13.21.0.release) +63 more potentially affected by CVE-2026-34164 via com.ritense.valtimo:inbox (>=13.0.0.release, <=13.21.0.release)

com.ritense.valtimo:inbox MAVEN version =13.0.0.release, =13.0.0.release, =13.0.0.release, =13.13.0.release, =13.0.0.release, =13.0.0.release, =13.0.0.release, =13.0.0.release, =13.0.0.release, =13.0.0.release, =13.0.0.release, =13.0.0.release, =13.0.0.release, =13.0.0.release, =13.0.0.release,...

com.ritense.valtimo:audit (>=13.0.0.release, <=13.21.0.release), com.ritense.valtimo:besluiten-api (>=13.0.0.release, <=13.21.0.release) +63 more potentially affected by CVE-2026-34164 via com.ritense.valtimo:inbox (>=13.0.0.release, <=13.21.0.release)

com.ritense.valtimo:inbox MAVEN version =13.0.0.release, =13.0.0.release, =13.0.0.release, =13.13.0.release, =13.0.0.release, =13.0.0.release, =13.0.0.release, =13.0.0.release, =13.0.0.release, =13.0.0.release, =13.0.0.release, =13.0.0.release, =13.0.0.release, =13.0.0.release, =13.0.0.release,...

com.ritense.valtimo:audit (>=13.0.0.release, <=13.21.0.release), com.ritense.valtimo:besluiten-api (>=13.0.0.release, <=13.21.0.release) +63 more potentially affected by CVE-2026-34164 via com.ritense.valtimo:inbox (>=13.0.0.release, <=13.21.0.release)

com.ritense.valtimo:inbox MAVEN version =13.0.0.release, =13.0.0.release, =13.0.0.release, =13.13.0.release, =13.0.0.release, =13.0.0.release, =13.0.0.release, =13.0.0.release, =13.0.0.release, =13.0.0.release, =13.0.0.release, =13.0.0.release, =13.0.0.release, =13.0.0.release, =13.0.0.release,...

EUVD-2026-22999

Weblate: Improper access control for the translation memory in API...

Europe’s Online Age Verification App Is Here

Available for free to any company that wants to use it, the “completely anonymous” app puts the pressure on porn sites and social media platforms to start blocking access by minors...

libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing

A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for...

CVE-2026-5758

A flaw was found in the protocol-buffers-schema JavaScript library. This vulnerability, known as prototype pollution, allows an attacker to inject malicious properties into an object's core definition. This could enable an attacker to change how an application behaves, bypass security measures, o...

USN-8180-1 linux, linux-aws, linux-aws-5.15, linux-gcp, linux-gke, linux-gkeop, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Drivers core; - Bluetooth drivers; - DMA engine subsystem; - GPU...

EUVD-2026-23172

The Vantage theme for WordPress is vulnerable to Stored Cross-Site Scripting via Gallery block text content in versions up to, and including, 1.20.32 due to insufficient output escaping in the gallery template. This makes it possible for authenticated attackers, with contributor-level access and...

CVE-2026-5070 Vantage <= 1.20.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Block Text Content

The Vantage theme for WordPress is vulnerable to Stored Cross-Site Scripting via Gallery block text content in versions up to, and including, 1.20.32 due to insufficient output escaping in the gallery template. This makes it possible for authenticated attackers, with contributor-level access and...

CVE-2026-5070

The Vantage theme for WordPress is vulnerable to Stored Cross-Site Scripting via Gallery block text content in versions up to, and including, 1.20.32 due to insufficient output escaping in the gallery template. This makes it possible for authenticated attackers, with contributor-level access and...

CVE-2026-5070 Vantage <= 1.20.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Block Text Content

The Vantage theme for WordPress is vulnerable to Stored Cross-Site Scripting via Gallery block text content in versions up to, and including, 1.20.32 due to insufficient output escaping in the gallery template. This makes it possible for authenticated attackers, with contributor-level access and...

PT-2026-33254

The Vantage theme for WordPress is vulnerable to Stored Cross-Site Scripting via Gallery block text content in versions up to, and including, 1.20.32 due to insufficient output escaping in the gallery template. This makes it possible for authenticated attackers, with contributor-level access and...

CVE-2026-5070: Improper Neutralization of Input During Web Page Generation

The Vantage theme for WordPress is vulnerable to Stored Cross-Site Scripting via Gallery block text content in versions up to, and including, 1.20.32 due to insufficient output escaping in the gallery template. This makes it possible for authenticated attackers, with contributor-level access and...