Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098857)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098857 advisory. In the Linux kernel, the following vulnerability has been resolved: md/md-bitmap: Synchronize bitmapgetstats with bitmap lifetime After commit ec6bb299c7c3...

PT-2026-82296

Name of the Vulnerable Software and Affected Versions Weblate versions prior to 2026.7 Description Several endpoints perform object lookups using a global scope instead of restricting the search to projects the user is authorized to access. Consequently, the system returns an HTTP 403 Forbidden...

PT-2026-82211

Name of the Vulnerable Software and Affected Versions DebugKit versions prior to 4.10.3 DebugKit versions prior to 5.2.4 Description The MailPreview feature in src/Controller/MailPreviewController.php fails to properly validate the previewName value in the findPreview function. The application...

CVE-2025-51675

An issue was discovered in openRISC OR1200 commit 83ac6b. An inaccurate update of program counter PC values when SPR changes can lead to a Denial of Service DoS...

PT-2026-82234

Name of the Vulnerable Software and Affected Versions whichllm versions prior to 0.5.16 Description A code injection issue exists in the run and snippet commands. A remote attacker controlling a HuggingFace repository can achieve arbitrary code execution by crafting a malicious GGUF filename...

EUVD-2025-210799

An issue was discovered in openRISC OR1200 commit 83ac6b. An inaccurate update of program counter PC values when SPR changes can lead to a Denial of Service DoS...

PT-2026-82300

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, an authenticated user with access to a project can retrieve the change history of restricted components in that project through nested API change endpoints, even without...

PT-2026-82286

An issue was discovered in openRISC OR1200 commit 83ac6b. An inaccurate update of program counter PC values when SPR changes can lead to a Denial of Service DoS...

PT-2026-82050

Arbitrary file overwrite via SAVE PROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3...

PT-2026-82325

Name of the Vulnerable Software and Affected Versions SeaweedFS versions prior to 4.40 Description The filer's TUS resumable-upload handler fails to verify JWT allowed prefixes scoping after a session is created. This allows a low-privilege tenant who obtains another user's session identifier to...

PT-2026-82214

ILIAS deserialises stored session data for an unauthenticated caller. The Shibboleth back-channel endpoint at components/ILIAS/AuthShibboleth/resources/shib logout.php runs in a context that ilInitialisation exempts from authentication, and its logout-notification handler locates the session to...

PT-2026-82301

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a user with the built-in "Edit source" role can store a malicious regular expression in a source string's flags that is executed without any timeout, allowing them to stall...

PT-2026-82287

An issue was discovered in openRISC OR1200 commit 83ac6b. A mismatch between the RTL and netlist can lead to unexpected behavior...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098805)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098805 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: do not ASSERT when the fs flips RO inside btrfsrepairiofailure BUG There is a bug report...

PT-2026-82310

amqp091-go is a Go AMQP 0.9.1 client. Before version 1.13.0, a compromised or malicious AMQP broker can force the client to allocate resources for and process content body frames that exceed the negotiated frame max limit. This can lead to unexpected memory consumption or application-layer denial...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098835)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098835 advisory. In the Linux kernel, the following vulnerability has been resolved: fbcon: Avoid OOB font access if console rotation fails Clear the font buffer if the reallocation...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-099012)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099012 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma4: replace BUGON with WARNON in fence emission sdmav40ringemitfence contains two...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098765)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098765 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: do not strictly require dirty metadata threshold for metadata writepages BUG There is an...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098887)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098887 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ipgre: require CAPNETADMIN in the device netns for changelink A tunnel changelink operates o...

ROS-20260826-73-0012

The vulnerability of the initbiosattributes function in the drivers/platform/x86/dell/dell-wmi-sysman/sysman.c file of the Linux kernel device driver for X86 processors is related to errors during link update. Exploiting this vulnerability could allow an attacker to cause a service failure...