Unity Linux 20.1070e Security Update: freerdp (UTSA-2026-035839)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-035839 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, a NULL pointer dereference vulnerability in rdpwritelogoninfov2 allows a malicious...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073371)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073371 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix fbnewmodelist to prevent null-ptr-deref in fbvideomodetovar info-var, a framebuffer's...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073359)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073359 advisory. In the Linux kernel, the following vulnerability has been resolved: xfs: fail recovery on a committed log item with no regions If the first op of a transaction is a...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053237)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053237 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent NULL dereference in ip6output According to syzbot, there is a chance that ip6dstide...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053271)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053271 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvs: fix ipv4 null-ptr-deref in route error path The IPv4 code path in ipvsgetoutrt calls...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053425)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053425 advisory. In the Linux kernel, the following vulnerability has been resolved: drm: vc4: Fix possible null pointer dereference In vc4hdmiaudioinit ofgetaddress may return NULL...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053294)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053294 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: spi-mt65xx: Fix NULL pointer access in interrupt handler The TX buffer in spitransfer can be...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053417)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053417 advisory. In the Linux kernel, the following vulnerability has been resolved: nouveau: fix instmem race condition around ptr stores Running a lot of VK CTS in parallel against...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053279)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053279 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/sti: avoid potential dereference of error pointers in stigdpatomiccheck The return value of...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053415)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053415 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl-asoc-card: set priv-pdev before using it priv-pdev pointer was set after being used in...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053230)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053230 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: mmcspi: fix error handling in mmcspiprobe If mmcaddhost fails, it doesn't need to call...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-105454)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105454 advisory. In the Linux kernel, the following vulnerability has been resolved: gtp: fix a potential NULL pointer dereference When sockfdlookup fails, gtpencapenablesocket retur...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053259)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053259 advisory. In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt6797: Add check for mtkallocclkdata Add the check for the return value of...

OESA-2026-3686 busybox security update

The Swiss Army Knife of Embedded Linux Security Fixes: A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATUREWGETTIMEOUT Handler. Such manipulation of the argument -T leads to null pointer dereference...

OESA-2026-3685 busybox security update

The Swiss Army Knife of Embedded Linux Security Fixes: A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATUREWGETTIMEOUT Handler. Such manipulation of the argument -T leads to null pointer dereference...

OESA-2026-3684 busybox security update

The Swiss Army Knife of Embedded Linux Security Fixes: A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATUREWGETTIMEOUT Handler. Such manipulation of the argument -T leads to null pointer dereference...

OESA-2026-3683 busybox security update

The Swiss Army Knife of Embedded Linux Security Fixes: A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATUREWGETTIMEOUT Handler. Such manipulation of the argument -T leads to null pointer dereference...

OESA-2026-3624 openssl security update

OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security TLS and Secure Sockets Layer SSL protocols. Security Fixes: Issue summary: The OpenSSL Certificate Management Protocol CMP caches additional certificates extraCerts sent in a CMP message, but never...

CVE-2026-86141

xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking...

AZL-99708 CVE-2026-86141 affecting package libxml2 2.11.5-10

xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking...