CVE-2026-61551

Icinga 2 is an open source monitoring system. Prior to 2.14.9, 2.15.4, and 2.16.2, parsing deeply nested JSON can exhaust the call stack because nesting depth is not bounded. The affected JSON parsing paths are reachable by unauthenticated network clients through the Icinga 2 service on TCP port...

CLEANSTART-2026-LO96817 Security fix for CVE-2018-6952 applied in: patch 2.7.6-r4

Security vulnerability affects the patch package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-WG57627 Security fix for CVE-2019-13636 applied in: patch 2.7.6-r5

Security vulnerability affects the patch package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-AO01721 Security fix for CVE-2018-6951 applied in: patch 2.7.6-r2

Security vulnerability affects the patch package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-JU77269 Security fix for CVE-2018-20969 applied in: patch 2.7.6-r6

Security vulnerability affects the patch package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-LC02147 Security fix for CVE-2019-13638 applied in: patch 2.7.6-r6

Security vulnerability affects the patch package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-KM86582 Security fix for CVE-2019-20633 applied in: patch 2.7.6-r7

Security vulnerability affects the patch package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ZQ70340 Security fix for CVE-2018-1000156 applied in: patch 2.7.6-r6

Security vulnerability affects the patch package. This issue is resolved in later releases. See references for vulnerability details...

Linux Distros Unpatched Vulnerability : CVE-2026-90120

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - irqchip/gic-v5: Check getlogicalindex return value in MADT IAFFID parsing In gicacpiparseiaffid a given MADT GICC entry might not correspond to a logical cpu...

Linux Distros Unpatched Vulnerability : CVE-2026-90194

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACPI: scan: fix bus ID cleanup on deviceadd failures When deviceadd fails after acpidevicesetname has allocated an instance ID and a new acpidevicebusid has bee...

Linux Distros Unpatched Vulnerability : CVE-2026-90175

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: server: fix leak of ksmbdipcloginrequestext returned buffer Free it unconditionally after ksmbdallocuser calls. kmemleak splat: unreferenced object...

Linux Distros Unpatched Vulnerability : CVE-2026-93157

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwrng: xilinx-trng - propagate timeout before any data is read xtrngreadblock32 polls for 16-byte chunks but returns the number of bytes read even when the firs...

PT-2026-102255

Security vulnerability affects the patch package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100957

Security vulnerability affects the patch package. This issue is resolved in later releases. See references for vulnerability details...

Linux Distros Unpatched Vulnerability : CVE-2026-90394

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - power: supply: sc2731charger: cancel work on remove The USB notifier and initial charger detection can schedule info-work. The remove path unregisters the...

Linux Distros Unpatched Vulnerability : CVE-2026-93175

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Fix dangling pointer in CRTC reset function amdgpudmcrtcresetstate frees the old state before allocating a new one. If kzalloc fails, the...

Linux Distros Unpatched Vulnerability : CVE-2026-90098

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: sparx5: fix sleep in atomic context in MAC table access sparx5setrxmode runs with netifaddrlockbh held and iterates dev-mc via devmcsync, which per address...

PT-2026-100895

Security vulnerability affects the patch package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101015

Security vulnerability affects the patch package. This issue is resolved in later releases. See references for vulnerability details...

Important: kernel-livepatch-6.12.95-124.187

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after devhardheader CVE-2026-68121 In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow CVE-2026-74469 In the Linux kernel, t...