Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010986)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010986 advisory. In the Linux kernel, the following vulnerability has been resolved: ARM: OMAP2+: Fix memory leak in realtimecounterinit The sysclk resource is malloced by clkget, it...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011056)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011056 advisory. In the Linux kernel, the following vulnerability has been resolved: testfirmware: fix memory leak in testfirmwareinit When miscregister failed in testfirmwareinit, t...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010929)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010929 advisory. In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: fix memory leak in dvbusbadapterinit Syzbot reports a memory leak in...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011360)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011360 advisory. In the Linux kernel, the following vulnerability has been resolved: regmap: slimbus: fix buscontext pointer in regmap init calls Commit 4e65bda8273c ASoC: wcd934x: f...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-006962)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006962 advisory. In the Linux kernel, the following vulnerability has been resolved: testfirmware: fix memory leak in testfirmwareinit When miscregister failed in testfirmwareinit, t...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011117)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011117 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: ipr: Fix WARNING in iprinit iprinit will not call unregisterrebootnotifier when...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013353)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013353 advisory. In the Linux kernel, the following vulnerability has been resolved: ARM: OMAP2+: Fix memory leak in realtimecounterinit The sysclk resource is malloced by clkget, it...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013007)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013007 advisory. In the Linux kernel, the following vulnerability has been resolved: hwrng: ks-sa - fix division by zero in kssarnginit Fix division by zero in kssarnginit caused by...

PT-2026-44332

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.11-1.1 Description An inconsistency exists in the calculation of sub-sampled plane dimensions within the drm gem fb init with funcs function. While the framebuffer check function uses DIV ROUND UP to round up...

EUVD-2026-23697

A security flaw has been discovered in kodcloud KodExplorer up to 4.52. Affected is the function initInstall of the file /app/controller/systemMember.class.php. Performing a manipulation of the argument path results in authorization bypass. The attack may be initiated remotely. The exploit has be...

CVE-2026-6568 kodcloud KodExplorer Public Share share.class.php initShareOld path traversal

A vulnerability was determined in kodcloud KodExplorer up to 4.52. This affects the function share.class.php::initShareOld of the file /app/controller/share.class.php of the component Public Share Handler. This manipulation of the argument path causes path traversal. The attack can be initiated...

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: zizmor, atuin, lychee, py3-xet-core, linkerd2, parseable, linkerd-extension-init, zola, sdp-k8s-injector, rye, xh, zellij, shadowsocks-rust, tealdeer, linkerd-network-validator, berg, uv, ztunnel, sqlx, wasmtime, pixi, kdash, samply, rustup, deno, sccache, cargo-audi...

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: zizmor, atuin, lychee, py3-xet-core, linkerd2, parseable, linkerd-extension-init, zola, sdp-k8s-injector, rye, xh, zellij, shadowsocks-rust, tealdeer, linkerd-network-validator, berg, uv, ztunnel, sqlx, wasmtime, pixi, kdash, samply, rustup, deno, sccache, cargo-audi...

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: linkerd-network-validator, linkerd2-proxy, zizmor, atuin, parseable, shadowsocks-rust, asciinema, sdp-k8s-injector, sqlx, samply, cargo-audit, buck2, py3-xet-core, sentry-cli, qdrant, lychee, wasmcloud, ntpd-rs, zellij, linkerd-extension-init, sccache, lakekeeper,...

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: linkerd-network-validator, linkerd2-proxy, zizmor, atuin, parseable, shadowsocks-rust, asciinema, sdp-k8s-injector, sqlx, samply, cargo-audit, buck2, py3-xet-core, sentry-cli, qdrant, lychee, wasmcloud, ntpd-rs, zellij, linkerd-extension-init, sccache, lakekeeper,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007378)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007378 advisory. In the Linux kernel, the following vulnerability has been resolved: ARM: zynq: Fix refcount leak in zynqearlyslcrinit offindcompatiblenode returns a node pointer wit...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007265)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007265 advisory. In the Linux kernel, the following vulnerability has been resolved: media: ttpci: fix two memleaks in budgetavattach When saa7146registerdevice and saa7146vvinit...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007341)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007341 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix memory leak in ocfs2stackglueinit ocfs2tableheader should be free in ocfs2stackglueini...

MAL-2026-2891 Malicious code in chai-as-init (npm)

chai-as-init is a malicious npm package that when imported downloads a C2 dropper from https://api.npoint.io/c2e881b8bc0fe2121454 and executes it similar to malware in to chai-await-test. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector...

GHSA-HW5X-4R37-72W7 OpenTofu has unbounded memory usage, high CPU usage, or deadlock in "tofu init" with maliciously-crafted dependency responses

Impact Unauthenticated denial of service. Summary When installing module packages from attacker-controlled sources, tofu init may use unbounded memory, cause high CPU usage, or deadlock when encountering maliciously-crafted TLS certificate chains or tar archives. Those who depend on modules or...