Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100377)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100377 advisory. In the Linux kernel, the following vulnerability has been resolved: blk-crypto: make blkcryptoevictkey more robust If blkcryptoevictkey sees that the key is still...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100356)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100356 advisory. In the Linux kernel, the following vulnerability has been resolved: rose: fix dangling neighbour pointers in rosertdevicedown There are two bugs in rosertdevicedown...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099985)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099985 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: guard against EA inode refcount underflow in xattr update syzkaller found a path where...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101482)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101482 advisory. Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 14...

Unity Linux 20.1070e Security Update: rubygem-excon (UTSA-2026-099493)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099493 advisory. Excon is usable, fast, simple HTTP 1.1 for Ruby. Prior to 1.5.0, Excon's RedirectFollower middleware failed to strip additional sensitive headers when following...

Unity Linux 20.1070e Security Update: log4j (UTSA-2026-099531)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099531 advisory. Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON. This issue...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100763)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100763 advisory. In the Linux kernel, the following vulnerability has been resolved: power: supply: bq25980: Fix use-after-free in powersupplychanged Using the devm variant for...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099761)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099761 advisory. In the Linux kernel, the following vulnerability has been resolved: pwm: lpc32xx: Remove handling of PWM channels Because LPC32xx PWM controllers have only a single...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-100954)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100954 advisory. This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100761)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100761 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: csiostor: Fix dereference of null pointer rn The error exit path when rn is NULL ends up...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100944)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100944 advisory. Sandbox escape in the Graphics: WebRender component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099765)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099765 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: do not update mtu if msgmax is too small in mtu negotiation When doing link mtu negotiation...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101359)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101359 advisory. Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100701)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100701 advisory. In the Linux kernel, the following vulnerability has been resolved: net: usb: catc: enable basic endpoint checking catcprobe fills three URBs with hardcoded endpoint...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-101085)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101085 advisory. A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099932)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099932 advisory. In the Linux kernel, the following vulnerability has been resolved: ipc/shm: serialize orphan cleanup with shmnattch updates shmdestroyorphaned walks the shm idr und...

CVE-2026-19629

A privilege escalation vulnerability exists in Tenable Security Center that allows a user with "Security Manager" role and "manage user" permission on a single group to modify users belonging to other groups. This bypasses the intended access control restrictions and enables unauthorized...

CVE-2026-19628

A command injection vulnerability exists in Tenable Security Center. An authenticated administrator could modify application configuration values to achieve arbitrary command execution on the underlying operating system when specific backend operations are triggered...

CVE-2026-19626

A remote code execution vulnerability exists in Tenable Security Center's report generation functionality. An authenticated, non-administrative user could exploit this issue by supplying specially crafted input that is later processed unsafely during server-side report rendering, resulting in...

CVE-2026-19629 Privilege Escalation

A privilege escalation vulnerability exists in Tenable Security Center that allows a user with "Security Manager" role and "manage user" permission on a single group to modify users belonging to other groups. This bypasses the intended access control restrictions and enables unauthorized...