Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013436)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013436 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/damon/dbgfs: fix 'struct pid' leaks in 'dbgfstargetidswrite' DAMON debugfs interface increases...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013500)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013500 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: always report error in runonedelayedref Currently we have a btrfsdebug for runonedelayedre...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013567)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013567 advisory. In the Linux kernel, the following vulnerability has been resolved: nfc: Fix potential resource leaks nfcgetdevice take reference for the device, add missing...

CVE-2026-41168: Excessive Iteration

pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.1 can craft a PDF which leads to long runtimes. This requires cross-reference streams with wrong large /Size values or object streams with wrong large /N values. This ha...

AlmaLinux 9 : kernel (ALSA-2026:8921)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:8921 advisory. kernel: net/sched: Make cakeenqueue return NETXMITCN when past bufferlimit CVE-2025-39766 kernel: scsi: qla2xxx: Fix improper freeing of purex item...

MINI-GX78-3MQQ-FV4X

Bulletin has no description...

MINI-CCGQ-CMGW-42GM

Bulletin has no description...

aioiliad (0.3.1), ansible-playbook-grapher (>=0.8.0, <=0.9.2) +23 more potentially affected by CVE-2026-41066 via lxml (4.2.5)

lxml PYPI version 4.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - aioiliad 0.3.1 - ansible-playbook-grapher =0.8.0, =4.4.1, =0.3.2, =1.2.0, =1.0.0a201811211534, =0.4.1, =0.3.0, =0.9.0, =0.1.1, =1.0.0, =1.0.2 and more...

CVE-2026-35234

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Partition. Supported versions that are affected are 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks ...

CVE-2026-34319

...

CVE-2026-34317

...

CVE-2026-34314

Oracle Financial Services Analytical Applications Infrastructure (OFSAAI), specifically the Platform component, is affected in versions 8.0.7.9, 8.0.8.7, and 8.1.2.5. The vulnerability allows a low-privilege, unauthenticated attacker with network access via HTTP to cause unauthorized creation, de...

CVE-2026-34308

...

CVE-2026-34305

...

CVE-2026-34302

...

CVE-2026-34298

CVE-2026-34298 affects Oracle Applications Framework within Oracle E-Business Suite, Personalization component. Affected: E-Business Suite versions 12.2.9–12.2.15. The vulnerability arises in the Personalization feature, enabling a high-privilege attacker with network access via HTTP to perform u...

CVE-2026-34297

...

CVE-2026-34296

...

CVE-2026-34282

...

CVE-2026-34281

CVE-2026-34281 concerns Oracle Solaris 11.4, specifically a vulnerability in the Kernel component. Affects the kernel on Oracle Solaris 11.4; exploitation requires low privileges and local logon. Successful exploitation can lead to a hang or frequently repeatable crash (complete DoS) of Oracle So...