Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098911)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098911 advisory. In the Linux kernel, the following vulnerability has been resolved: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page nvmetexecutediscgetlogpage...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098902)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098902 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: terminate table name before findtablelock updatecounters and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098907)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098907 advisory. In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before returning from fusereffolio fusereffolio unlocks the request but doe...

Linux Distros Unpatched Vulnerability : CVE-2026-80543

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Pad trailing CCA or EP11 message with zeros The both functions...

Unity Linux 20.1060a / 20.1070a Security Update: abrt (UTSA-2026-104840)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104840 advisory. A race condition was found in the abrt-dbus D-Bus service's ChownProblemDir method. ChownProblemDir opens the dump directory with DDOPENREADONLY and calls ddchown to...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098929)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098929 advisory. In the Linux kernel, the following vulnerability has been resolved: usbnet: gl620a: fix out-of-bounds read in genelinkrxfixup genelinkrxfixup splits an aggregated R...

Linux Distros Unpatched Vulnerability : CVE-2026-79771

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nokogiri versions before 1.19.3 contain a memory leak in the XSLT Stylesheet transform method when processing Ruby strings containing null bytes. Attackers can...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098996)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098996 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: ah: account for ESN high bits in async callbacks AH allocates its temporary auth/ICV layout...

Linux Distros Unpatched Vulnerability : CVE-2026-79772

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nokogiri versions before 1.19.1 fail to check the return value from xmlC14NExecute in the canonicalize method, returning an empty string on failure instead of...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098774)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098774 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftct: bail out on template ct in get eval I noticed this issue while looking at a...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-099008)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099008 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: schred: Replace direct dequeue call with peek and qdiscdequeuepeeked When red qdisc ha...

Linux Distros Unpatched Vulnerability : CVE-2026-80184

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Keystone before 29.0.3, tokens obtained via delegated authentication mechanisms OAuth1 access tokens, application credentials, trusts could be...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the JWE.deserialize method jwcrypto/jwe.py:555, which calls rawjwe.split'.' on the input before checking that the compact serialization has the required five segments . An attacker...

Next.js Unauthenticated RCE on Windows Servers

This module exploits a Remote Code Execution RCE vulnerability in Next.js applications hosted on Windows servers. Specifically crafted requests can execute arbitrary code on the target server. The affected versions include releases from 13.4.0 up to 15.5.24, and 16.0.0 up to 16.3.3, utilizing bot...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-099000)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099000 advisory. In the Linux kernel, the following vulnerability has been resolved: dm-thin: fix metadata refcount underflow There's a bug in dm-thin in the function...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: infinispan (UTSA-2026-032351)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032351 advisory. A vulnerability was found in Infinispan such that the invokeAccessibly method from the public class ReflectionUtil allows any application class to invoke private...

Linux Distros Unpatched Vulnerability : CVE-2026-80584

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/qeth: validate user buffer length in SNMP and ARP query ioctls qethsnmpcommand and qethl3arpquery allocate a buffer sized by a user-supplied length udatale...

Linux Distros Unpatched Vulnerability : CVE-2026-80578

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fbdev: core: Fix pointer desynchronization in fbioread In fbioread, if copytouser performs a partial copy e.g., due to a faulty user buffer, the loop adjusts th...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104601)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104601 advisory. In the Linux kernel, the following vulnerability has been resolved: tpm: Make the TPM character devices non-seekable The TPM character devices expose a sequential...

Linux Distros Unpatched Vulnerability : CVE-2026-74738

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - regmap: sdw-mbq: don't call an unset readablereg callback regmapsdwmbqpollbusy decides whether to poll the Function Busy bit by calling ctx-readablereg, which i...