ALSA-2026:55435 Important: gstreamer1-plugins-ugly-free security update

GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins whose license is not fully compatible with LGPL. Security Fixes: gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds chec...

PT-2026-73347

Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication...

Unity Linux 20.1070e Security Update: expat (UTSA-2026-099452)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099452 advisory. libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen. Tenable has extracted the preceding description blo...

RHEL 9 : haproxy (RHSA-2026:55802)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:55802 advisory. The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fixes: haprox...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099695)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099695 advisory. In the Linux kernel, the following vulnerability has been resolved: udf: validate sparing table length as an entry count, not a byte count udfloadsparablemap accept...

Oracle Linux 10 : gstreamer1-plugins-ugly-free (ELSA-2026-55435)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-55435 advisory. 1.26.7-2.2 - Fix CVE-2026-19389: integer overflow vulnerabilities in asfdemux Resolves: RHEL-235515 Tenable has extracted the preceding description block...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099962)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099962 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/umem: Fix truncation for block sizes = 4G When the iommu is used the linearization of the...

Unity Linux 20.1070e Security Update: expat (UTSA-2026-099486)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099486 advisory. libexpat before 2.8.2 has an integer overflow in addBinding. Tenable has extracted the preceding description block directly from the Unity Linux security advisory...

Unity Linux 20.1070a Security Update: poppler (UTSA-2026-099553)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099553 advisory. A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, triggers an...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099708)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099708 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/komeda: fix integer overflow in AFBC framebuffer size check The AFBC framebuffer size...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099765)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099765 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: do not update mtu if msgmax is too small in mtu negotiation When doing link mtu negotiation...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101088)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101088 advisory. Integer overflow in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100957)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100957 advisory. Integer overflow in the JavaScript: Standard Library component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140....

Oracle Linux 8 : 389-ds:1.4 (ELSA-2026-55530)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55530 advisory. - Resolves: RHEL-183073 - EMBARGOED CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check rhel-8.10.z -...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099720)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099720 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: fix hdrlen overflow in ipv6rplsrhdecompress ipv6rplsrhdecompress computes:...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101376)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101376 advisory. Integer overflow in the SVG component. This vulnerability was fixed in Firefox 143, Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100504)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100504 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: reject overflowing copy + len in bpfmsgpushdata When the scatterlist ring is full o...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101294)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101294 advisory. Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefo...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100762)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100762 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: dev: prevent integer overflow in I2CTIMEOUT ioctl While fuzzing with Syzkaller, a persistent...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100905)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100905 advisory. Integer overflow in the Networking: JAR component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. Tenable...