Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005084)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005084 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: make sure the first directory block is not a hole The syzbot constructs a directory that ha...

ibaPDA security vulnerabilities

ibaPDA is an industrial process data acquisition and analysis system developed by the German company iba. There is a security vulnerability in ibaPDA, which allows unauthorized operations on the file system under certain conditions. This vulnerability may affect the confidentiality, integrity, or...

CVE-2025-14988: Incorrect Permission Assignment for Critical Resource

A security issue has been identified in ibaPDA that could allow unauthorized actions on the file system under certain conditions. This may impact the confidentiality, integrity, or availability of the system...

PT-2026-5016

Name of the Vulnerable Software and Affected Versions ibaPDA version 8.12.0 Description A security issue exists in ibaPDA that could allow unauthorized actions on the file system. This may impact the confidentiality, integrity, or availability of the system. The issue is a permission flaw that...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005107)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005107 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix DIO failure due to insufficient transaction credits The code in ocfs2dioendiowrite...

CVE-2025-27821

Apache Hadoop is vulnerable to an out-of-bounds write in the HDFS native client affecting versions from 3.2.0 before 3.4.2 . This vulnerability is also present in IBM Optim versions 1.0.0, 1.1.0, and 1.2.0 . Impact may include memory corruption or crashes. Remediation includes upgrading Apache Ha...

ROS-20260126-73-0032

A vulnerability in the eaget function of the fs/jfs/xattr.c component of the Linux operating system kernel is related to reading outside the allowed data buffer boundaries. Exploitation of the vulnerability may allow an attacker to gain access to sensitive data and also cause a denial of service...

ROS-20260126-73-0036

A vulnerability in the f2fs component of the Linux operating system kernel is related to unchecked array indexing. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260126-73-0034

A vulnerability in the ocfs2 component of the Linux operating system kernel is related to reading outside the allowed data buffer boundaries. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

Apache Hadoop security vulnerabilities

Apache Hadoop is an open-source distributed system framework developed by the Apache Foundation in the United States. This product enables distributed processing of large amounts of data, featuring high reliability, scalability, and fault tolerance. ClickHouse is an open-source implementation of...

The vulnerability of the Oracle Solaris operating system’s file system, which allows a perpetrator to cause a service failure

The vulnerability of the Oracle Solaris operating system’s file system is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

resource-agents security update

4.9.0-54.27 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139760, RHEL-140787 4.9.0-54.24 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136031 4.9.0-54.23 - nfsserver: add ability to set e.g. 'pipefs-directory=/run/nfs/rpcpipefs' in /etc/nfs.con...

CVE-2025-71163

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix device leaks on compat bind and unbind Make sure to drop the reference taken when looking up the idxd device as part of the compat bind and unbind sysfs interface...

January 24, 2026—KB5078133 (OS Build 25398.2097) Out-of-band

None None...

January 24, 2026—KB5078131 (OS Build 17763.8281) Out-of-band

None None...

CVE-2026-22989

In the Linux kernel, the following vulnerability has been resolved: nfsd: check that server is running in unlockfilesystem If we are trying to unlock the filesystem via an administrative interface and nfsd isn't running, it crashes the server. This happens currently because nfsd4revokestates acce...

CVE-2026-22989

In the Linux kernel, the following vulnerability has been resolved: nfsd: check that server is running in unlockfilesystem If we are trying to unlock the filesystem via an administrative interface and nfsd isn't running, it crashes the server. This happens currently because nfsd4revokestates acce...

CVE-2026-22989

In the Linux kernel, the following vulnerability has been resolved: nfsd: check that server is running in unlockfilesystem If we are trying to unlock the filesystem via an administrative interface and nfsd isn't running, it crashes the server. This happens currently because nfsd4revokestates acce...

CVE-2026-22989 nfsd: check that server is running in unlock_filesystem

In the Linux kernel, the following vulnerability has been resolved: nfsd: check that server is running in unlockfilesystem If we are trying to unlock the filesystem via an administrative interface and nfsd isn't running, it crashes the server. This happens currently because nfsd4revokestates acce...

CVE-2026-22980 nfsd: provide locking for v4_end_grace

In the Linux kernel, the following vulnerability has been resolved: nfsd: provide locking for v4endgrace Writing to v4endgrace can race with server shutdown and result in memory being accessed after it was freed - reclaimstrhashtbl in particularly. We cannot hold nfsdmutex across the nfsd4endgrac...