Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101342)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101342 advisory. Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird...

Oracle Linux 8 : 389-ds:1.4 (ELSA-2026-55530)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55530 advisory. - Resolves: RHEL-183073 - EMBARGOED CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check rhel-8.10.z -...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100707)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100707 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - Cap AEAD AD length to 0x80000000 In order to prevent arithmetic overflows when...

Unity Linux 20.1070e Security Update: expat (UTSA-2026-099462)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099462 advisory. libexpat before 2.8.2 has an integer overflow in storeAtts. Tenable has extracted the preceding description block directly from the Unity Linux security advisory. No...

Unity Linux 20.1070e Security Update: expat (UTSA-2026-099475)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099475 advisory. libexpat before 2.8.2 has an integer overflow in copyString. Tenable has extracted the preceding description block directly from the Unity Linux security advisory...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100905)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100905 advisory. Integer overflow in the Networking: JAR component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. Tenable...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100762)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100762 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: dev: prevent integer overflow in I2CTIMEOUT ioctl While fuzzing with Syzkaller, a persistent...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100975)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100975 advisory. Incorrect boundary conditions, integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 149.0.2, Firefox ESR 140.9.1, Thunderbird...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100185)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100185 advisory. In the Linux kernel, the following vulnerability has been resolved: ext2: Check block size validity during mount Check that log of block size stored in the superbloc...

openSUSE 16: git-cliff / git-cliff-bash-completion / git-cliff-fish-completion / etc (openSUSE-SU-2026:21584-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21584-1 advisory. Changes in git-cliff: - Update to version 2.13.1: Support more configuration file locations Add per-commit statistics Expose determined bump typ...

Oracle Linux 10 : gstreamer1-plugins-bad-free (ELSA-2026-55433)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-55433 advisory. - Fix ADPCM decoder input validation CVE-2026-19387 Resolves: RHEL-235500 - Fix rfbsrc hextile and color read handling for non-32bpp pixel formats...

Unity Linux 20.1070e Security Update: expat (UTSA-2026-099461)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099461 advisory. xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations. Tenable has extracted the preceding description block directly fr...

Unity Linux 20.1070e Security Update: expat (UTSA-2026-099518)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099518 advisory. libexpat before 2.8.2 has an integer overflow in XMLParseBuffer because it lacked a check that was present in XMLParse. Tenable has extracted the preceding descripti...

RockyLinux 10 : gstreamer1-plugins-ugly-free (RLSA-2026:55435)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:55435 advisory. gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds read CVE-2026-19389 Tenable ha...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mozjs78 (UTSA-2024-003181)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-003181 advisory. Ports that were written as an integer overflow above the bounds of a 16-bit integer could have bypassed port blocking restrictions when used in the Alt-Svc header...

Unity Linux 20.1070e Security Update: expat (UTSA-2026-099515)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099515 advisory. xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used. Tenable has extracted the preceding description block...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100967)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100967 advisory. Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefo...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099765)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099765 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: do not update mtu if msgmax is too small in mtu negotiation When doing link mtu negotiation...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100957)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100957 advisory. Integer overflow in the JavaScript: Standard Library component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140....

Unity Linux 20.1070e Security Update: expat (UTSA-2026-099486)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099486 advisory. libexpat before 2.8.2 has an integer overflow in addBinding. Tenable has extracted the preceding description block directly from the Unity Linux security advisory...