Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng12 (UTSA-2026-093174)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093174 advisory. Multiple integer overflows in libpng before 1.5.14rc03 allow remote attackers to cause a denial of service crash via a crafted image to the 1 pngsetsPLT or 2...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098804)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098804 advisory. In the Linux kernel, the following vulnerability has been resolved: mm: blk-cgroup: fix use-after-free in cgwbreleaseworkfn cgwbreleaseworkfn calls cssputwb-blkcgcss...

Oracle Linux 10 : assertj-core (ELSA-2026-59372)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-59372 advisory. - Fix CVE-2026-24400: add XXE protection to XmlStringPrettyFormatter Tenable has extracted the preceding description block directly from the Oracle Linux...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: fwupd (UTSA-2026-054034)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054034 advisory. A PGP signature bypass flaw was found in fwupd all versions, which could lead to the installation of unsigned firmware. As per upstream, a signature bypass is...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098859)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098859 advisory. In the Linux kernel, the following vulnerability has been resolved: inotify: fix watch count leak when fsnotifyaddinodemarklocked fails When fsnotifyaddinodemarklock...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098931)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098931 advisory. In the Linux kernel, the following vulnerability has been resolved: isofs: bound Rock Ridge symlink components to the SL record getsymlinkchunk and the SL handling i...

Fedora 43 : python-tablib (2026-81ad01b22a)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-81ad01b22a advisory. Resolves: https://nvd.nist.gov/vuln/detail/CVE-2026-9318 Tenable has extracted the preceding description block directly from the Fedora security advisory. No...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098678)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098678 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix use-after-free of work objects after cmid destruction The commit 59c68ac31e15 iwcm...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098728)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098728 advisory. In the Linux kernel, the following vulnerability has been resolved: dm-verity: disable recursive forward error correction There are two problems with the recursive...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104562)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104562 advisory. In the Linux kernel, the following vulnerability has been resolved: gue: validate REMCSUM private option length GUE private flags can indicate that remote checksum...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: openssh (UTSA-2026-104841)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104841 advisory. A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie- Hellman Group Exchange DH-GEX client path. This occurs...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: openssh (UTSA-2026-104823)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104823 advisory. sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay. Tenable has extracted the preceding description block directly from the Unity Lin...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098679)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098679 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: socket: Lookup orig tuple for IPv6 SNAT nfsklookupslowv4 does the conntrack lookup for...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-099003)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099003 advisory. In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: restrict usage in unprivileged domU The Xen privcmd driver allows to issue arbitrary...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104590)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104590 advisory. In the Linux kernel, the following vulnerability has been resolved: net: sit: require CAPNETADMIN in the device netns for changelink ipip6changelink operates on at...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: openssh (UTSA-2026-104824)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104824 advisory. sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when sftp server:/path . is used with an attacker-controlled server. Tenable...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: struts (UTSA-2026-031328)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-031328 advisory. ActionServlet.java in Apache Struts 1 1.x through 1.3.10 does not properly restrict the Validator configuration, which allows remote attackers to conduct cross-site...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098843)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098843 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix handling of lrbp-cmd ufshcdqueuecommand may be called two times in a row for...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-104795)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104795 advisory. FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory ...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098694)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098694 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2isvalidoplockbreak Skip sessions that are being teared down...