Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099713)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099713 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Bound iscsiencodetextoutput appends to rspbuf iscsiencodetextoutput...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099761)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099761 advisory. In the Linux kernel, the following vulnerability has been resolved: pwm: lpc32xx: Remove handling of PWM channels Because LPC32xx PWM controllers have only a single...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100774)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100774 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Clamp HDMI HDCP2 rxidlist read to buffer size Why & How During HDCP 2.x repeater...

unbound security update

1.16.2-5.14 - Add unit test for CVE-2026-44690 from upstream. 1.16.2-5.13 - Fix CVE-2026-44690 RHEL-212801...

libXfont2 security update

2.0.6-5.3 - CVE fix for: CVE-2026-59679 Resolves: https://redhat.atlassian.net/browse/RHEL-221949 2.0.6-5.2 - CVE fix for: CVE-2026-44950 Resolves: https://redhat.atlassian.net/browse/RHEL-222024...

OPENSUSE-SU-2026:11533-1 python313-tablib-3.10.0-1.1 on GA media

These are all security issues fixed in the python313-tablib-3.10.0-1.1 package on the GA media of openSUSE Tumbleweed...

Important: .NET 9.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

Critical Photon OS Security Update - PHSA-2026-5.0-91-0960

Updates of 'coreutils', 'alsa-lib', 'rubygem-fluentd', 'go' packages of Photon OS have been released...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: mozjs78 (UTSA-2024-003380)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-003380 advisory. xmltokimpl.c in Expat aka libexpat before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context...

unbound security update

1.24.2-3.4 - Fix CVE-2026-55973 RHEL-212809...

libssh security update

0.12.0-3 - Backport CVE fixes from 0.12.2 Resolves: RHEL-213004 Resolves: RHEL-213029 Resolves: RHEL-213032 Resolves: RHEL-213039 Resolves: RHEL-213046 Resolves: RHEL-213079 Resolves: RHEL-213112 Resolves: RHEL-213117 Resolves: RHEL-213148 Resolves: RHEL-213150 Resolves: RHEL-213175...

OPENSUSE-SU-2026:11531-1 htop-3.5.3-1.1 on GA media

These are all security issues fixed in the htop-3.5.3-1.1 package on the GA media of openSUSE Tumbleweed...

MiracleLinux 9 : hplip-3.21.2-6.el9_8.5.ML.1 (AXSA:2026-1545:04)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1545:04 advisory. HPLIP: Incomplete Fix for CVE-2026-8631 CVE-2026-14544 Tenable has extracted the preceding description block directly from the MiracleLinux security advisory...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-100940)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100940 advisory. A validation issue was addressed with improved logic. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5,...

OPENSUSE-SU-2026:11529-1 forgejo-cli-0.6.0-2.1 on GA media

These are all security issues fixed in the forgejo-cli-0.6.0-2.1 package on the GA media of openSUSE Tumbleweed...

Important: unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fixes: unbound: Unbound: Cache poisoning via insufficient RRSIG.Labels validation and premature cache writes CVE-2026-44690 For more details about the security issues, including the impact, a CVSS...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: dotnet8.0: aspnetcore-runtime-8.0-8.0.30-0.1.hum1 aarch64, x8664 aspnetcore-runtime-dbg-8.0-8.0.30-0.1.hum1 aarch64, x8664 aspnetcore-targeting-pack-8.0-8.0.30-0.1.hum1 aarch64, x8664...

DEBIAN-CVE-2026-19349

Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2 state parameter stored as an SSO session in the GitHub and LinkedIn backends. Before redirecting to the identity provider, extractFormIn...

UBUNTU-CVE-2026-19349

Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2 state parameter stored as an SSO session in the GitHub and LinkedIn backends. Before redirecting to the identity provider, extractFormIn...

CVE-2026-19349

Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2 state parameter stored as an SSO session in the GitHub and LinkedIn backends. Before redirecting to the identity provider, extractFormIn...