PT-2026-126486

Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

PT-2026-126487

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

PT-2026-126502

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

PT-2026-126505

Use-after-free in the Networking: WebSockets component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

PT-2026-126510

Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

PT-2026-126522

Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

PT-2026-126536

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

PT-2026-126577

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

Moderate: gcc-toolset-15-gcc security update

The gcc-toolset-15-gcc package contains the GNU Compiler Collection version 15. Security Fixes: gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap eraseif CVE-2026-102010 For more details about the security issues, including the impact, a CVSS score,...

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component CVE-2026-92035 firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component CVE-2026-100832 firefox:...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146335)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146335 advisory. In the Linux kernel, the following vulnerability has been resolved: dmaengine: Fix possible use after free In dmareleasechannel, check chan-device-privatecnt after...

ALSA-2026:90915 Moderate: gcc-toolset-15-gcc security update

The gcc-toolset-15-gcc package contains the GNU Compiler Collection version 15. Security Fixes: gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap eraseif CVE-2026-102010 For more details about the security issues, including the impact, a CVSS score,...

PT-2026-126503

Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

PT-2026-126504

Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

Linux Distros Unpatched Vulnerability : CVE-2026-98982

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - namespace: don't let a pseudo dentry become the root of a mount dallocpseudo hands out dentries for pipes, sockets and other files that are never anyone's child...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146317)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146317 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntracksip: widen NAT rewrite delta to s32 in siphelptcp siphelptcp stores the siz...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146141)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146141 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before...

PT-2026-126595

Use-after-free in the Layout: Images, Video, and HTML Frames component. This vulnerability was fixed in Firefox 159...

RockyLinux 10 : libreswan (RLSA-2026:89923)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89923 advisory. libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP CVE-2026-94453 libreswan: Denial of Service via sending bogus X.509 certificates...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146334)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146334 advisory. In the Linux kernel, the following vulnerability has been resolved: gtp: Fix use-after-free in gtpencapdestroy. syzkaller reported use-after-free in gtpencapdestroy....