Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098716)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098716 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: replace BUGON with proper error handling in ext4readinlinefolio Replace BUGON with proper...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: bison (UTSA-2026-093642)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093642 advisory. GNU Bison before 3.7.1 has a use-after-free in obstackfree in lib/obstack.c called from gramlex when a '\0' byte is encountered. NOTE: there is a risk only if Bison ...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098824)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098824 advisory. In the Linux kernel, the following vulnerability has been resolved: bcache: fix variable length array abuse in btreeiter btreeiter is used in two ways: either...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-093645)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093645 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.33 and prior and 8.0.23 and prior. Difficul...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104558)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104558 advisory. In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix flex array size in struct nvmenshead struct nvmenshead contains a flexible...

AlmaLinux 9 : nginx (ALSA-2026:59362)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:59362 advisory. nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial of service ...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098705)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098705 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Convert to DRM's vblank timer Replace vkms' vblank timer with the DRM implementation. T...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mailman (UTSA-2026-093166)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093166 advisory. GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrftoken value is not specific to a single user account. An attacker can obtain a value within th...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: unbound (UTSA-2026-104806)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104806 advisory. In NLnet Labs Unbound up to and including version 1.25.1, when 'unwanted-reply-threshold' is enabled set to any value greater than zero, glue records of 0.0.0.0/::0...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: iperf3 (UTSA-2026-104808)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104808 advisory. A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control- channel JSON with oversized numeric parameters, such as...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-104539)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104539 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: fix integer overflow in bpfmsgpopdata bounds check start and len are u32, so u64 la...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098672)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098672 advisory. In the Linux kernel before 6.6.7, an untrusted VMM can trigger int80 syscall handling at any given point. This is related to arch/x86/coco/tdx/tdx.c and...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-093635)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093635 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Information Schema. Supported versions that are affected are 5.7.32 and prior and 8.0.22 and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098795)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098795 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/vmwpvrdma: Fix double free on pvrdmaallocucontext error path Sashiko points out that...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098811)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098811 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: always flush state and policy upon NETDEVUNREGISTER event syzbot is reporting that struct...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098858)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098858 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix race of buffer access at PCM OSS layer The PCM OSS layer tries to clear the buffer...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098901)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098901 advisory. In the Linux kernel, the following vulnerability has been resolved: hdlcppp: sync per-proto timers before freeing hdlc state Each PPP control protocol LCP/IPCP/IPV6...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098812)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098812 advisory. In the Linux kernel, the following vulnerability has been resolved: ethtool: Avoid overflowing userspace buffer on stats query The ethtool -S command operates across...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: unbound (UTSA-2026-104811)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104811 advisory. In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when an auth/rpz zone has a configured primary hostname that resolves to BOGUS A/AAAA, it is still considered...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wireshark (UTSA-2026-104763)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104763 advisory. UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service Tenable has extracted the preceding description block directly from t...