RHEL 9 : RHEL AI 3.5 RPM runtime CVE fix - ffmpeg (Important) (RHSA-2026:60335)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:60335 advisory. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098829)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098829 advisory. In the Linux kernel, the following vulnerability has been resolved: dochangetype: refuse to operate on unmounted/not ours mounts Ensure that propagation settings can...

AlmaLinux 10 : pam (ALSA-2026:59379)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:59379 advisory. linux-pam: Plaintext password recovery via timing discrepancy in pamuserdb module CVE-2026-54411 Tenable has extracted the preceding description block directly...

AlmaLinux 8 : firefox (ALSA-2026:58898)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:58898 advisory. firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component CVE-2026-74983 firefox: thunderbird: Site isolation issue in the Graphics:...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-104821)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104821 advisory. FFmpeg's RASC video decoder decodedlta in libavcodec/rasc.c performs 32-bit reads and writes at the row cursor before the NEXTLINE row-boundary check and validates t...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098717)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098717 advisory. In the Linux kernel, the following vulnerability has been resolved: net: strparser: fix skbhead leak in strpabortstrp When the stream parser is aborted, for example...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098941)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098941 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: ipgre: make ipgreheader robust Analog to commit db5b4e39c4e6 ip6gre: make ip6greheader robu...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098674)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098674 advisory. In the Linux kernel, the following vulnerability has been resolved: pps: Fix a use-after-free On a board running ntpd and gpsd, I'm seeing a consistent use-after-fre...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098830)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098830 advisory. In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix UAF when lookup kallsym after ftrace disabled The following issue happens with a bug...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098787)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098787 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: restrict SOATTACHFILTER to priv users This patch restricts the use of SOATTACHFILTER cBPF on...

Linux Distros Unpatched Vulnerability : CVE-2026-74734

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - firewire: ohci: fix NULL pointer dereference in arcontextrelease During the error handling path of the driver's probe function, a NULL pointer dereference can...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-104795)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104795 advisory. FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory ...

RockyLinux 8 : gstreamer1-plugins-base (RLSA-2026:59487)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:59487 advisory. gstreamer: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow CVE-2026-18297 Tenable has extracted the preceding description block directly...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: nodejs-grunt (UTSA-2026-093223)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093223 advisory. The package grunt before 1.3.0 are vulnerable to Arbitrary Code Execution due to the default usage of the function load instead of its secure replacement safeLoad of...

AlmaLinux 10 : firefox (ALSA-2026:58899)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:58899 advisory. firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component CVE-2026-74983 firefox: thunderbird: Site isolation issue in the Graphics:...

Linux Distros Unpatched Vulnerability : CVE-2026-59981

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion picture industry. In versions through 3.2.10,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098924)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098924 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: restrict implied bcc0 exemption to responses without data area smb2checkmessage has ...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: hibernate-validator (UTSA-2026-093179)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093179 advisory. A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invalid EL expressions to be evaluated as if they...

MiracleLinux 9 : gstreamer1-plugins-bad-free-1.22.12-7.el9_8.4, gstreamer1-plugins-ugly-free-1.22.12-6.el9_8.2 (AXSA:2026-1666:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1666:01 advisory. gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder CVE-2026-19387 gstreamer:...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mailman (UTSA-2026-093193)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093193 advisory. In GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user options page can execute arbitrary JavaScript for XSS. Tenable has extracted the preceding...