ALSA-2026:55865 Important: gstreamer1-plugins-bad-free and gstreamer1-plugins-ugly-free security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fixes: gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI...

unbound security update

1.24.2-3.4 - Fix CVE-2026-55973 RHEL-212809...

libssh security update

0.12.0-3 - Backport CVE fixes from 0.12.2 Resolves: RHEL-213004 Resolves: RHEL-213029 Resolves: RHEL-213032 Resolves: RHEL-213039 Resolves: RHEL-213046 Resolves: RHEL-213079 Resolves: RHEL-213112 Resolves: RHEL-213117 Resolves: RHEL-213148 Resolves: RHEL-213150 Resolves: RHEL-213175...

Important: unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fixes: unbound: Unbound: Cache poisoning via insufficient RRSIG.Labels validation and premature cache writes CVE-2026-44690 For more details about the security issues, including the impact, a CVSS...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101348)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101348 advisory. Other issue in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. Tenable ha...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-100947)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100947 advisory. The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3,...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101113)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101113 advisory. Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100516)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100516 advisory. In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check INITFAILED before nvmetrequninit in digest error path In nvmettcptryrecvddgst,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100729)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100729 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrackirc: fix possible out-of-bounds read When parsing fails after we've matched t...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100961)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100961 advisory. Memory safety bugs present in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and ...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099696)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099696 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and IOCTLs The QAT driver exposes a character device...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100975)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100975 advisory. Incorrect boundary conditions, integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 149.0.2, Firefox ESR 140.9.1, Thunderbird...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100922)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100922 advisory. Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbi...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100582)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100582 advisory. In the Linux kernel, the following vulnerability has been resolved: tunnels: do not assume transport header in iptunnelpmtudcheckicmp In some cases,...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100156)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100156 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: usbtmc: Flush anchored URBs in usbtmcrelease When calling usbtmcrelease, pending anchored UR...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100770)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100770 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev: au1200fb: Fix a memory leak in au1200fbdrvprobe In au1200fbdrvprobe, when platformgetirq...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101279)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101279 advisory. Memory safety bug present in Firefox ESR 128.9, and Thunderbird 128.9. This bug showed evidence of memory corruption and we presume that with enough effort this coul...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100190)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100190 advisory. In the Linux kernel, the following vulnerability has been resolved: tunnels: load network headers after skbcow in iptunnelpmtudbuildicmpv6 Sashiko found that...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100327)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100327 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev: bitblit: bound-check glyph index in bitputcs bitputcsaligned/unaligned derived the glyph...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101340)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101340 advisory. Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enou...