gstreamer1-plugins-good security update

1.26.7-2.8 - Fix use-after-free vulnerability in RTP SBC depayloader CVE-2026-18299 Resolves: RHEL-246613...

PT-2026-81929

The implementation of this ioctl attempts to acquire locks on all channels in a sync group. If locking a channel would block, it releases the sync group list lock and sleeps. Upon reawakening, it is possible that the sync group structure is freed, but the implementation did not handle this...

EUVD-2026-66754

Stomper 5e2741e is vulnerable to Use-After-Free. When a single client repeatedly issues SUBSCRIBE commands for the same destination over one connection and then closes that connection, the broker performs incorrect cleanup of its internal subscription structures. This results in a heap...

CVE-2026-26448

Stomper (commit 5e2741e) contains a heap use-after-free in its STOMP protocol broker. When a client sends multiple CONNECT frames on the same TCP connection and a subsequent client or connection sends SEND frames to a destination previously subscribed on that connection, the broker may dereferenc...

EUVD-2026-66753

Stomper 5e2741e is vulnerable to Use-After-Free. When a client sends multiple CONNECT frames on the same TCP connection, and subsequently another client or a later connection sends SEND frames to a destination previously subscribed on that connection, the broker may dereference a pointer to a...

CVE-2026-26447

Stomper (commit 5e2741e ) contains a heap use-after-free vulnerability in its STOMP broker's subscription management. When a single client repeatedly sends SUBSCRIBE commands for the same destination and then disconnects, the broker incorrectly cleans up its internal subscription structures. The ...

Linux Distros Unpatched Vulnerability : CVE-2026-78951

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HT...

SUSE SLES15 Security Update : kernel RT (Live Patch 12 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:3746-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3746-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.40 fixes various security issues: The following security issues were fixed: -...

Linux Distros Unpatched Vulnerability : CVE-2026-79195

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Script in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098899)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098899 advisory. In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before replacing page cache folio fusetrymovefolio unlocks the request on...

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ksm: use range-walk function to jump over holes in scangetnextrmapitem CVE-2025-68211 kernel: ip6tunnel: use skbvlaninetprepare in ip6tnlrcv CVE-2026-23003 kernel: netfilter:...

Linux Distros Unpatched Vulnerability : CVE-2026-74746

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: flowtable: publish GC-visible tuple last nfflowtableiterate only treats original-direction tuple nodes as owning entries. Publishing the original nod...

Linux Distros Unpatched Vulnerability : CVE-2026-79290

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098791)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098791 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels seg6inputcore and rplinput call...

Linux Distros Unpatched Vulnerability : CVE-2026-80563

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gpio: sloppy-logic-analyzer: fix use-after-free via debugfs trigger on unbind The trigger debugfs file has a hand-rolled -write handler triggerwrite that...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098804)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098804 advisory. In the Linux kernel, the following vulnerability has been resolved: mm: blk-cgroup: fix use-after-free in cgwbreleaseworkfn cgwbreleaseworkfn calls cssputwb-blkcgcss...

Linux Distros Unpatched Vulnerability : CVE-2026-78944

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098729)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098729 advisory. In the Linux kernel, the following vulnerability has been resolved: fbcon: Set fbdisplayi-mode to NULL when the mode is released Recently, we discovered the followi...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098674)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098674 advisory. In the Linux kernel, the following vulnerability has been resolved: pps: Fix a use-after-free On a board running ntpd and gpsd, I'm seeing a consistent use-after-fre...

Linux Distros Unpatched Vulnerability : CVE-2026-74744

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipvlan: inherit neededheadroom and neededtailroom from phydev ipvlan devices inherit hardheaderlen from phydev during ipvlaninit, but leave neededheadroom and...