AZL-99837 CVE-2026-80229 affecting package rust 1.75.0-31

When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership...

ALPINE-CVE-2026-80229

When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership...

AZL-99867 CVE-2026-80229 affecting package rust 1.90.0-10

When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership...

CVE-2026-80229

The curl library is vulnerable to a heap-use-after-free flaw when using the multi interface with OpenSSL 3 provider configurations. The root cause is that libcurl attaches an allocated library context to an easy handle's state but fails to acquire an ownership reference. Consequently, destroying ...

CVE-2026-80229 OpenSSL provider use-after-free

When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership...

CVE-2026-80229

When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership...

libxml2: libxml2: Denial of Service due to NULL pointer dereference in xmlRegNewParserCtxt

A NULL pointer dereference in libxml2's xmlRegNewParserCtxt function allows a local attacker to cause a denial of service DoS. The flaw occurs when strlen is called on an unverified pointer following a failed xmlStrdup memory allocation, resulting in a process crash...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053405)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053405 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: update sjournalinum if it changes after journal replay When mounting a crafted ext4 image,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053253)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053253 advisory. In the Linux kernel, the following vulnerability has been resolved: serial: max3100: Update uartdriverregistered on driver removal The removal of the last MAX3100...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053208)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053208 advisory. In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt2701: Add check for mtkallocclkdata Add the check for the return value of...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053328)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053328 advisory. In the Linux kernel, the following vulnerability has been resolved: afpacket: avoid erroring out after sockinitdata in packetcreate After sockinitdata the allocated ...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053264)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053264 advisory. In the Linux kernel, the following vulnerability has been resolved: iio: accel: bmc150: Fix irq assumption regression The code in bmc150-accel-core.c unconditionally...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053207)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053207 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix a null pointer crash in mtkdrmcrtcfinishpageflip It's possible that mtkcrtc-eve...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053237)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053237 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent NULL dereference in ip6output According to syzbot, there is a chance that ip6dstide...

Unity Linux 20.1070e Security Update: freerdp (UTSA-2026-035839)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-035839 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, a NULL pointer dereference vulnerability in rdpwritelogoninfov2 allows a malicious...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073372)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073372 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev: fix use-after-free in storemodes storemodes replaces a framebuffer's modelist with modes...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073359)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073359 advisory. In the Linux kernel, the following vulnerability has been resolved: xfs: fail recovery on a committed log item with no regions If the first op of a transaction is a...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053320)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053320 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Update intermediate power state for SI Update the current state as boot state during...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053254)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053254 advisory. In the Linux kernel, the following vulnerability has been resolved: mISDN: Fix memory leak in dsppipelinebuild dsppipelinebuild allocates dup pointer by kstrdupcfg,...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073355)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073355 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: qup: fix error pointer deref after DMA setup failure The driver falls back to PIO mode if DM...