ALSA-2026:55434 Moderate: gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fixes: gstreamer1-plugins-good: gstreamer: unsigned integer...

gstreamer1-plugins-good security update

1.22.12-7.4 - Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling Resolves: RHEL-239042 1.22.12-7.3 - Fix CVE-2026-73433: add bounds checks to FUJIFILM strd metadata parsing in avidemux to prevent unsigned integer underflow Resolves: RHEL-239060...

RHEL 10 : gstreamer1-plugins-bad-free (RHSA-2026:55433)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:55433 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gstreamer1-plugins-good (UTSA-2026-022345)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022345 advisory. An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in gstwavparseadtlchunk function. The patch added a size validation check lsize + 8 size, but it do...

Oracle Linux 10 : gstreamer1-plugins-ugly-free (ELSA-2026-55435)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-55435 advisory. 1.26.7-2.2 - Fix CVE-2026-19389: integer overflow vulnerabilities in asfdemux Resolves: RHEL-235515 Tenable has extracted the preceding description block...

ALSA-2026:55436 Moderate: gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fixes: gstreamer1-plugins-good: gstreamer: unsigned integer...

RHEL 10 : gstreamer1-plugins-good (RHSA-2026:55434)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55434 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages...

CVE-2026-15345

The ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.11.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

@rse/claudex (>=0.9.22, <=1.0.10), @snyk/snyk-cocoapods-plugin (>=2.6.0, <=3.1.2) +6 more potentially affected by CVE-2026-73055 via shescape (>=2.1.0, <=2.1.14)

shescape NPM version =2.1.0, =0.9.22, =2.6.0, =2.0.0, =8.0.0, =6.0.0, =3.0.0, =3.0.0, =3.1.4 Source cves: CVE-2026-73055 Source advisory: SNYK:JS-SHESCAPE-18855681...

RHSA-2026:54752 Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

Bulletin has no description...

RHSA-2026:54665 Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

Bulletin has no description...

RHSA-2026:54664 Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

Bulletin has no description...

RHSA-2026:54660 Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

Bulletin has no description...

RHSA-2026:54659 Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

Bulletin has no description...

RHSA-2026:54658 Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

Bulletin has no description...

GO-2024-2598 vulnerabilities

Vulnerabilities for packages: mockery, cortex, hello-world-golang, k3s, kube-rbac-proxy, kubernetes-dns-node-cache, ctop, docker-cli, secrets-store-csi-driver-provider-gcp, render-template, kpt, kind, php-fpmexporter, sbom-scorecard, wazero, nri-mssql, speedtest-go, yam, nri-prometheus,...

GO-2024-2599 vulnerabilities

Vulnerabilities for packages: mockery, cortex, hello-world-golang, k3s, kube-rbac-proxy, kubernetes-dns-node-cache, ctop, docker-cli, secrets-store-csi-driver-provider-gcp, render-template, kpt, kind, php-fpmexporter, sbom-scorecard, wazero, nri-mssql, speedtest-go, yam, nri-prometheus,...

GO-2026-4984 vulnerabilities

Vulnerabilities for packages: cortex, victoriametrics, k3s, go, secrets-store-csi-driver-provider-gcp, helm-docs, k8s-device-plugin, hivemind, amazon-cloudwatch-agent, buildah, sftpgo, trino, kpt, harbor-scanner-trivy, tw, mc, speedtest-go, nri-prometheus, influx, licenseclassifier, datadog-agent...

GO-2023-2382 vulnerabilities

Vulnerabilities for packages: aactl, cortex, ctop, oras, docker-cli, dgraph, render-template, gops, protoc-gen-go-grpc, go-bindata, aws-flb-kinesis, metrics-server, grpcurl, kind, sbom-scorecard, cni-plugins, cass-operator, influx, helm-push, go-licenses, sonobuoy, aws-flb-cloudwatch, k3d,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: k3s, docker-cli, render-template, mockgen, kpt, kind, harbor-registry, step-kms-plugin, pluto, aws-otel-collector, k3d, docker-cli-buildx, src, ratify, dex, gobuster, kubernetes-dashboard-auth, guac, conftest, amazon-cloudwatch-agent-operator, gobump, ini-file,...