ALSA-2026:55784 Important: unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fixes: unbound: Unbound: Cache poisoning via insufficient RRSIG.Labels validation and premature cache writes CVE-2026-44690 For more details about the security issues, including the impact, a CVSS...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099941)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099941 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate group add input before caching BUG OCFS2IOCGROUPADD can trigger a BUGON in...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101490)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101490 advisory. Information disclosure in the Networking: Cache component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100542)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100542 advisory. In the Linux kernel, the following vulnerability has been resolved: dm cache policy smq: fix missing locks in invalidating cache blocks In passthrough mode, the...

unbound security update

1.24.2-18 - Add unit tests for CVE-2026-44690,55973 1.24.2-17 - Fix CVE-2026-55973: dns-error-reporting stack buffer overflow 1.24.2-16 - Fix CVE-2026-44690 - Cross-zone wildcard cache poisoning...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099970)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099970 advisory. In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache Make sure resource...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100773)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100773 advisory. In the Linux kernel, the following vulnerability has been resolved: fuse: reject fusenotify pagecache ops on directories The operations FUSENOTIFYSTORE and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100775)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100775 advisory. In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache Make sure resource...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099762)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099762 advisory. In the Linux kernel, the following vulnerability has been resolved: dm cache policy smq: check allocation under invalidate lock commit 2d1f7b65f5de dm cache policy...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100935)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100935 advisory. Mitigation bypass in the Networking: Cache component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. Tenable...

ALSA-2026:55841 Important: unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fixes: unbound: Unbound: Cache poisoning via insufficient RRSIG.Labels validation and premature cache writes CVE-2026-44690 unbound: Unbound: Denial of Service via malformed EDNS Report-Channel opti...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: samba (UTSA-2026-100779)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100779 advisory. A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote,...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-100960)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100960 advisory. The issue was addressed with improved handling of caches. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26....

Unity Linux 20.1070e Security Update: python-django (UTSA-2026-099506)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099506 advisory. An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. django.middleware.cache.UpdateCacheMiddleware in Django does not add Authorization to the...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101295)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101295 advisory. Information disclosure in the Networking: Cache component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3...

Unity Linux 20.1070e Security Update: python-django (UTSA-2026-099500)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099500 advisory. An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. UpdateCacheMiddleware and the cachepage decorator cache responses that vary on cookies when...

RHEL 8 : unbound (RHSA-2026:55784)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:55784 advisory. The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fixes: unbound: Unbound: Cache poisoning via...

Important: unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fixes: unbound: Unbound: Cache poisoning via insufficient RRSIG.Labels validation and premature cache writes CVE-2026-44690 For more details about the security issues, including the impact, a CVSS...

Unity Linux 20.1070e Security Update: python-django (UTSA-2026-099501)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099501 advisory. An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. django.utils.cache.hasvaryheader in Django does not strip leading or trailing whitespace fr...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100746)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100746 advisory. In the Linux kernel, the following vulnerability has been resolved: dm cache policy smq: check allocation under invalidate lock commit 2d1f7b65f5de dm cache policy...