Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-006976)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006976 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network When copying a struct...

OpenBSD 安全漏洞

OpenBSD is a cross-platform, BSD-based UNIX-like operating system developed by the OpenBSD organization in Canada. Versions of OpenBSD 7.8 and earlier contained a security vulnerability caused by the slaacd and rad daemon entering an infinite loop when receiving a specially crafted ICMPv6 neighbo...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013037)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013037 advisory. In the Linux kernel, the following vulnerability has been resolved: ip6vti: fix slab-use-after-free in decodesession6 When ipv6vti device is set to the qdisc of the...

PT-2026-41172

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.9.0 Description A Server-Side Request Forgery SSRF bypass exists in the validate url function located in backend/open webui/retrieval/web/utils.py. The function calls validators.ipv6ip, private=True, but because...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-006936)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006936 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: fix potential struct net leak in inet6rtmgetaddr It seems that if userspace provides a...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011067)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011067 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network When copying a struct...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013202)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013202 advisory. In the Linux kernel, the following vulnerability has been resolved: net: read sk-skfamily once in skmcloop syzbot is playing with IPV6ADDRFORM quite a lot these days...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011354)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011354 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6/addrconf: fix a potential refcount underflow for idev Now in addrconfmodrstimer, reference...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-013184)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013184 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix an uninit variable access bug in ip6makeskb Syzbot reported a bug as following:...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-006979)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006979 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvti: fix potential slab-use-after-free in decodesession6 When ipvti device is set to the qdisc ...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011396)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011396 advisory. In the Linux kernel, the following vulnerability has been resolved: net/ip6tunnel: Prevent perpetual tunnel growth Similarly to ipv4 tunnel, ipv6 version updates...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011001)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011001 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: Add lwtunnel encap size of all siblings in nexthop calculation In function rt6nlmsgsize, th...

MiracleLinux 9 : go-rpm-macros-3.6.0-14.el9_7 (AXSA:2026-474:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-474:02 advisory. net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 Tenable has extracted the preceding description block directly from the MiracleLinu...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013197)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013197 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: ensure sane device mtu in tunnels Another syzbot report 1 with no reproducer hints at a bug...

RHEL 10 : git-lfs (RHSA-2026:9435)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:9435 advisory. Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing t...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013177)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013177 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix out-of-bounds access in ipv6findtlv optlen is fetched without checking whether there is...

RHEL 9 : git-lfs (RHSA-2026:9439)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:9439 advisory. Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing th...

RockyLinux 10 : go-rpm-macros (RLSA-2026:8840)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:8840 advisory. net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 Tenable has extracted the preceding description block directly from the RockyLinux...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013045)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013045 advisory. In the Linux kernel, the following vulnerability has been resolved: net: read sk-skfamily once in skmcloop syzbot is playing with IPV6ADDRFORM quite a lot these days...

Important: Red Hat Security Advisory: skopeo security update

An update for skopeo is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...