Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100505)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100505 advisory. In the Linux kernel, the following vulnerability has been resolved: 6lowpan: fix NHC entry use-after-free on error path lowpannhcdouncompression looks up an NHC...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100574)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100574 advisory. In the Linux kernel, the following vulnerability has been resolved: exfat: fix potential use-after-free in exfatfinddirentry In exfatfinddirentry, the bufferhead...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099755)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099755 advisory. In the Linux kernel, the following vulnerability has been resolved: bonding: alb: fix UAF in rlbarprecv during bond up/down The ALB RX path may access rxhashtbl...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-100974)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100974 advisory. A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS 15.8.7 an...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100533)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100533 advisory. In the Linux kernel, the following vulnerability has been resolved: cpufreq: pcc: fix use-after-free and double free in OSC evaluation pcccpufreqdoosc calls...

MiracleLinux 8 : thunderbird-140.13.0-1.el8_10.ML.1 (AXSA:2026-1547:18)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1547:18 advisory. firefox: thunderbird: Site isolation issue in the DOM: Navigation component CVE-2026-15719 firefox: thunderbird: Invalid pointer in the JavaScript:...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100708)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100708 advisory. In the Linux kernel, the following vulnerability has been resolved: ipc/shm: serialize orphan cleanup with shmnattch updates shmdestroyorphaned walks the shm idr und...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100562)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100562 advisory. In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: add skbcowdata before in-place crypto llsecdoencryptunauth, llsecdoencryptauth,...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100110)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100110 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: refresh tcphdr after skbensurewritable synproxytstampadjust rewrites the TCP...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100538)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100538 advisory. In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in binderthreadrelease When a thread exits, binderthreadrelease walks its...

About the security content of macOS Tahoe 26.6.2

About the security content of macOS Tahoe 26.6.2 This update delivers security fixes that were first made available in the macOS Golden Gate 27 beta. This document describes the security content of macOS Tahoe 26.6.2. About Apple security updates For our customers' protection, Apple doesn't...

MiracleLinux 8 : kernel-4.18.0-553.150.1.el8_10 (AXSA:2026-1544:62)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1544:62 advisory. kernel: rtnetlink: add missing netlinknscapable check for peer netns CVE-2026-31692 kernel: netfilter: ctnetlink: ensure safe access to master...

PT-2026-89055

zstd-jni before 1.5.7-14 contains a use-after-free vulnerability where streams and contexts hold a dictionary's shared lock only during the load call, allowing the dictionary to be closed while still referenced. Attackers can close a dictionary after associating it with a stream or context, causi...

Security update for chromium (important)

openSUSE security update: security update for chromium ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21581-1 Rating: important References: bsc1274759 Cross-References: CVE-2026-19556 CVE-2026-19557 CVE-2026-19558 CVE-2026-19559 CVE-2026-19560...

SUSE CVE-2026-74441

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Fix race condition and ordering in port unregistration A synchronization issue exists during port unregistration where pending partner work items can race against workqueue destruction, leading to use-after-free...

SUSE CVE-2026-74450

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix pptable use-after-free amdgpudpmgetpptable returns a pointer to a driver-owned power table after dropping adev-pm.mutex. The sysfs path then copies from that pointer. A concurrent pptable write can replace and fre...

SUSE CVE-2026-74461

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: Cancel hrtimer before clearing slave pointer In i2cimxunregslave, the slave pointer is set to NULL after disabling interrupts. However, a pending interrupt might already have started the hrtimer i2cimxslavetimeout befor...

SUSE CVE-2026-74465

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix potential UAF on meter attach failure While attaching a newly created meter attachmeter function makes the new meter visible to other CPUs but can still fail afterwards. On failure, it detaches the meter bac...

SUSE CVE-2026-74471

In the Linux kernel, the following vulnerability has been resolved: tracing: Check return value of registerevent in tracemoduleaddevents tracemoduleaddevents ignores the return value of registerevent and unconditionally calls addeventtotracers for each event. If registerevent fails for example, i...

SUSE CVE-2026-74472

In the Linux kernel, the following vulnerability has been resolved: ublk: reset kernel-owned devinfo fields in ublkctrladddev ublkctrladddev memcpys the userspace ublksrvctrldevinfo into ub-devinfo and then fixes up the fields the driver owns, but misses -state and -ublksrvpid. A device added wit...