Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098791)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098791 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels seg6inputcore and rplinput call...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098760)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098760 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6output Use RCU in ip6output in order to use dstdevrcu to prevent possible UAF...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-104531)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104531 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvs: use parsed transport offset in SCTP state lookup setsctpstate reads the SCTP chunk header...

kernel security, bug fix, and enhancement update

5.14.0-687.42.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104578)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104578 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackreasm: guard macheader adjustment after IPv6 defrag nfctfrag6reasm slides...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098854)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098854 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: fix potential race in tcpv6synrecvsock Code in tcpv6synrecvsock after the call to...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098967)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098967 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix soft lockups in fib6selectpath under high next hop churn Soft lockups have been observe...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104607)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104607 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvs: use parsed transport offset in SCTP state lookup setsctpstate reads the SCTP chunk header...

AlmaLinux 9 : grafana (ALSA-2026:58982)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:58982 advisory. grafana: Grafana: Privilege escalation via dashboard overwrite CVE-2026-33377 grafana: Grafana Auth Proxy: Unauthorized access due to incorrect IPv6...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104604)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104604 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: addrconf: bail out of dadfailure when state is no longer POSTDAD addrconfdadfailure...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-104536)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104536 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop The ah, hbh and rt matche...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098720)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098720 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvs: skip ipv6 extension headers for csum checks Protocol checksum validation fails for IPv6 if...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104543)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104543 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: ipv6: clamp default adverting MSS to avoid GSOBYFRAGS 0xFFFF When MTU is large,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104546)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104546 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvs: fix more places with wrong ipv6 transport offsets Sashiko reports for more incorrect IPv6...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098679)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098679 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: socket: Lookup orig tuple for IPv6 SNAT nfsklookupslowv4 does the conntrack lookup for...

CVE-2026-52776

compliance-trestle (Trestle), a Python tooling platform for managing compliance-as-code via OSCAL, contains an SSRF bypass in its URLSecurityValidator (trestle/core/remote/security.py). The validator fails to canonicalize IPv4-mapped IPv6 literals (e.g., [::ffff:169.254.169.254]) before network m...

CVE-2026-52776 Trestle URLSecurityValidator SSRF allowlist bypass via IPv4-mapped IPv6 and 0.0.0.0

Compliance-trestle Trestle is a tooling platform for managing compliance as code. In versions before 3.12.4 and versions 4.0.0 through 4.0.3, the URLSecurityValidator that guards trestle's remote-fetch paths against server-side request forgery can be bypassed to reach loopback, link-local,...

CVE-2026-52776 Trestle URLSecurityValidator SSRF allowlist bypass via IPv4-mapped IPv6 and 0.0.0.0

Compliance-trestle Trestle is a tooling platform for managing compliance as code. In versions before 3.12.4 and versions 4.0.0 through 4.0.3, the URLSecurityValidator that guards trestle's remote-fetch paths against server-side request forgery can be bypassed to reach loopback, link-local,...

CVE-2026-52776 Trestle URLSecurityValidator SSRF allowlist bypass via IPv4-mapped IPv6 and 0.0.0.0

Compliance-trestle Trestle is a tooling platform for managing compliance as code. In versions before 3.12.4 and versions 4.0.0 through 4.0.3, the URLSecurityValidator that guards trestle's remote-fetch paths against server-side request forgery can be bypassed to reach loopback, link-local,...

Security Bulletin: Vulnerability in netty-handler affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in netty-handler has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...