Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100320)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100320 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: fix bcackers underflow on duplicate GRPACKMSG The GRPACKMSG handler in tipcgroupprotorcv...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099777)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099777 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/omfs: reject ssysblocksize smaller than OMFSDIRSTART omfsfillsuper rejects oversized...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099919)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099919 advisory. In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix integer underflow in chain mode The jumbofrm chain-mode implementation...

PT-2026-76753

Name of the Vulnerable Software and Affected Versions bcg729 versions prior to 1.1.3 Description An out-of-bounds read exists in the decodeSIDframe function within src/cng.c. Unauthenticated network-adjacent attackers can trigger a heap read beyond buffer boundaries by sending a zero-length...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100572)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100572 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Reject MPA FPDU length underflow before signed receive math A malicious connected siw...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100122)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100122 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Reject MPA FPDU length underflow before signed receive math A malicious connected siw...

RockyLinux 9 : gstreamer1-plugins-good (RLSA-2026:55436)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:55436 advisory. gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux FUJIFILM strd parsing leading to out-of-bounds read/write CVE-2026-73433...

RockyLinux 10 : gstreamer1-plugins-good (RLSA-2026:55434)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:55434 advisory. gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux FUJIFILM strd parsing leading to out-of-bounds read/write CVE-2026-73433...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-100918)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100918 advisory. A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash DoS via a crafted...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100389)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100389 advisory. In the Linux kernel, the following vulnerability has been resolved: EFI/CPER: don't dump the entire memory region The current logic at cperprintfwerr doesn't check i...

Moderate: gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fixes: gstreamer1-plugins-good: gstreamer: unsigned integer...

ALSA-2026:55436 Moderate: gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fixes: gstreamer1-plugins-good: gstreamer: unsigned integer...

clamav: Fix of 6 CVEs

CVE-2026-20213: fix Aspack-triggered PE rebuild integer overflow leading to heap buffer overflow write - CVE-2026-20214: fix FSG unpacker section loop underflow leading to out-of-bounds write - CVE-2026-20215: fix 7z substream count overflow leading to heap under-allocation and out-of-bounds...

CVE-2026-74444

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate DRAWPRIMITIVES header size before division vmwcmddraw computes maxnum = header-size - sizeofcmd-body / sizeofdecl; where header-size is u32 and is taken straight from the user-supplied command stream. When...

CVE-2026-74470 scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write

In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Fix REPORT ZONES alloclen underflow OOB write respreportzones sizes the reply buffer from the CDB allocation length. The v3 fix rounds alloclen up with ALIGN before deriving the descriptor count: repmaxzones =...

CVE-2026-74470 scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write

In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Fix REPORT ZONES alloclen underflow OOB write respreportzones sizes the reply buffer from the CDB allocation length. The v3 fix rounds alloclen up with ALIGN before deriving the descriptor count: repmaxzones =...

CVE-2026-74444

The vulnerability CVE-2026-74444 affects the Linux kernel DRM vmwgfx driver. In vmw_cmd_draw, the header size from user input can cause an unsigned subtraction (header->size - sizeof(cmd->body)) to wrap to ~4 GiB when header->size is undersized, leading to a large maxnum and an out-of-bo...

EUVD-2026-59751

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate DRAWPRIMITIVES header size before division vmwcmddraw computes maxnum = header-size - sizeofcmd-body / sizeofdecl; where header-size is u32 and is taken straight from the user-supplied command stream. When...

CVE-2026-74444 drm/vmwgfx: validate DRAW_PRIMITIVES header size before division

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate DRAWPRIMITIVES header size before division vmwcmddraw computes maxnum = header-size - sizeofcmd-body / sizeofdecl; where header-size is u32 and is taken straight from the user-supplied command stream. When...

CVE-2026-74349

In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject FITRIM ranges shorter than a cluster ocfs2trimmainbm trims the global bitmap in cluster units, but its too-short range validation only checks sb-sblocksize. On filesystems with a cluster size larger than the block...