Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gstreamer1-plugins-good (UTSA-2026-022345)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022345 advisory. An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in gstwavparseadtlchunk function. The patch added a size validation check lsize + 8 size, but it do...

Moderate: gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fixes: gstreamer1-plugins-good: gstreamer: unsigned integer...

CVE-2026-15345

The ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.11.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

@rse/claudex (>=0.9.22, <=1.0.10), @snyk/snyk-cocoapods-plugin (>=2.6.0, <=3.1.2) +6 more potentially affected by CVE-2026-73055 via shescape (>=2.1.0, <=2.1.14)

shescape NPM version =2.1.0, =0.9.22, =2.6.0, =2.0.0, =8.0.0, =6.0.0, =3.0.0, =3.0.0, =3.1.5 Source cves: CVE-2026-73055 Source advisory: SNYK:JS-SHESCAPE-18855681...

RHSA-2026:54752 Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

Bulletin has no description...

RHSA-2026:54665 Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

Bulletin has no description...

RHSA-2026:54664 Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

Bulletin has no description...

RHSA-2026:54659 Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

Bulletin has no description...

RHSA-2026:54660 Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

Bulletin has no description...

RHSA-2026:54658 Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

Bulletin has no description...

GO-2024-2599 vulnerabilities

Vulnerabilities for packages: flux-helm-controller, go-bindata, k8ssandra-operator, aws-efs-csi-driver, tflint, dockerize, flux, direnv, prometheus-pushgateway, aws-flb-cloudwatch, cri-tools, docker-credential-acr-env, nri-memcached, gops, kubebuilder, flux-image-automation-controller, tailscale,...

GO-2024-2598 vulnerabilities

Vulnerabilities for packages: flux-helm-controller, go-bindata, k8ssandra-operator, aws-efs-csi-driver, tflint, dockerize, flux, direnv, prometheus-pushgateway, aws-flb-cloudwatch, cri-tools, docker-credential-acr-env, nri-memcached, gops, kubebuilder, flux-image-automation-controller, tailscale,...

GO-2026-4984 vulnerabilities

Vulnerabilities for packages: newrelic-nri-statsd, croc, cilium-cli, mc, nri-postgresql, certificate-transparency, crossplane, flux, incert, prometheus-pushgateway, aws-flb-cloudwatch, timestamp-authority, grafana, apache-exporter, nats-server-config-reloader, helm-docs, gatekeeper, step,...

GO-2023-2382 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, gke-gcloud-auth-plugin, cass-operator, go-bindata, flannel-cni-plugin, cni-plugins, docker-cli, sops, aws-flb-cloudwatch, mage, vertical-pod-autoscaler, amass, cortex, gops, gobuster, oras, smarter-device-manager, sonobuoy, grpcurl,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: terraform-provider-azapi, docker-cli-buildx, tflint, cilium-cli, kyverno-notation-aws, flux, nri-memcached, emissary, nats-server-config-reloader, envconsul, rabbitmq-messaging-topology-operator, thanos-operator, wait-for-port, migrate, pluto, mongo-tools,...

SUSE CVE-2026-73433

A flaw was found in GStreamer gst-plugins-good avidemux. When parsing FUJIFILM metadata in an AVI strd chunk, gstavidemuxparsestrd decrements a remaining-length counter by fixed offsets 98 and 10 bytes without verifying sufficient data remains. For crafted strd payloads of exactly 106 or 107 byte...

SUSE CVE-2026-73434

A flaw was found in GStreamer gst-plugins-good avidemux. In gstavidemuxriffparsevprp, the number of available gstriffvprpvideofielddesc entries is calculated by dividing the remaining buffer size by the attacker-controlled vprp-fields value, rather than by sizeofgstriffvprpvideofielddesc. This ca...

Important: Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

RHEL 7 : gstreamer1-plugins-bad-free (RHSA-2026:54752)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:54752 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package...

Important: Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common...