Unity Linux 20.1070a Security Update: libpq (UTSA-2026-099550)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099550 advisory. Use of inherently dangerous function PQfn..., resultisint=0, ... in PostgreSQL libpq loexport, loread, lolseek64, and lotell64 functions allows the server superuser ...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101283)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101283 advisory. Incorrect boundary conditions in the JavaScript: GC component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3...

Unity Linux 20.1070e Security Update: python-django (UTSA-2026-099482)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099482 advisory. An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. django.middleware.cache.UpdateCacheMiddleware in Django does not match Cache-Control respon...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100125)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100125 advisory. In the Linux kernel, the following vulnerability has been resolved: net: rds: clear isends on setup unwind The RDS IB connection teardown path is written so it can r...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100919)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100919 advisory. A malicious mail server could send malformed strings with negative lengths, causing the parser to read memory outside the buffer. If a mail server or connection to a...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100500)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100500 advisory. In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: validate MAP frame length before ingress parsing When ingress deaggregation...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101312)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101312 advisory. Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbir...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100373)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100373 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Prevent shift wrapping in setusersqsize The ucmd-logsqbbcount variable is controlled b...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100297)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100297 advisory. In the Linux kernel, the following vulnerability has been resolved: dm: clear cloned request bio pointer when last clone bio completes Stale rq-bio values have been...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-101086)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101086 advisory. The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099711)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099711 advisory. In the Linux kernel, the following vulnerability has been resolved: net: macb: use the current queue number for stats There's a potential mismatch between the memory...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099972)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099972 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: wacom: Fix OOB write in wacomhidsetdevicemode wacomhidsetdevicemode currently assumes that t...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100511)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100511 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: ecc - Fix carry overflow in vli multiplication The carry flag calculation fails when...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099961)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099961 advisory. In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix refcount saturation and potential UAF in qrtrportremove In qrtrportremove, the...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099705)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099705 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Prevent out-of-bounds read in glob matching String event fields are not necessarily...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100311)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100311 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: renesasusbhs: Reorder clock handling and power management in probe Reorder the initializatio...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100730)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100730 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/komeda: fix integer overflow in AFBC framebuffer size check The AFBC framebuffer size...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100142)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100142 advisory. In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: fix skackbacklog leak on failed handshake When vmcitransportrecvconnectingserver...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-100899)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100899 advisory. The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3,...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100939)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100939 advisory. Race condition, use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101157)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101157 advisory. Same-origin policy bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100572)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100572 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Reject MPA FPDU length underflow before signed receive math A malicious connected siw...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100388)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100388 advisory. In the Linux kernel, the following vulnerability has been resolved: dm integrity: call kmemcachedestroy in dmintegrityinit error path Otherwise the journaliocache wi...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100521)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100521 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: serial: digiacceleport: fix write buffer corruption The digiwriteinbcommand is supposed to...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100561)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100561 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh pointer after ipv6hopjumbo ipv6hopjumbo calls pskbtrimrcsum, which can...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099940)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099940 advisory. In the Linux kernel, the following vulnerability has been resolved: hwmon: occ Fix division by zero in occshowpower1 In occshowpower1 case 1, the accumulator is...

RockyLinux 9 : gstreamer1-plugins-good (RLSA-2026:55436)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:55436 advisory. gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux FUJIFILM strd parsing leading to out-of-bounds read/write CVE-2026-73433...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099959)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099959 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: netem: fix queue limit check to include reordered packets The queue limit check in...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100168)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100168 advisory. In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: Add NULL check in aspeedlpcenablesnoop devmkasprintf returns NULL when memory...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100934)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100934 advisory. Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. Tenable h...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100520)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100520 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: fix out-of-bounds read in broadcast Gap ACK blocks A broadcast PROTOCOL/STATEMSG can carry...

Unity Linux 20.1050e / 20.1070e Security Update: lua (UTSA-2025-000295)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-000295 advisory. ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal3,2^31. Tenable has extracted the...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101322)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101322 advisory. Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. Tenable h...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099987)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099987 advisory. In the Linux kernel, the following vulnerability has been resolved: pppoe: drop PFC frames RFC 2516 Section 7 states that Protocol Field Compression PFC is NOT...

RHEL 8 : kpatch-patch-4_18_0-553_109_1, kpatch-patch-4_18_0-553_125_1, kpatch-patch-4_18_0-553_53_1, kpatch-patch-4_18_0-553_72_1, and kpatch-patch-4_18_0-553_85_1 (RHSA-2026:55762)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55762 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patc...

RHEL 8 : kernel (RHSA-2026:55444)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55444 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: xen: AMD Zen 2 Processors:...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100186)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100186 advisory. In the Linux kernel, the following vulnerability has been resolved: net: phy: leds: fix memory leak A network restart test on a router led to an out-of-memory...

RHEL 9 : gstreamer1-plugins-good (RHSA-2026:55436)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55436 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages conta...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101346)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101346 advisory. Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. Tenable has extract...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099895)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099895 advisory. In the Linux kernel, the following vulnerability has been resolved: dax: Fix daxmappingrelease use after free A CONFIGDEBUGKOBJECTRELEASE test of removing a device-d...

RockyLinux 10 : gstreamer1-plugins-good (RLSA-2026:55434)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:55434 advisory. gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux FUJIFILM strd parsing leading to out-of-bounds read/write CVE-2026-73433...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100698)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100698 advisory. In the Linux kernel, the following vulnerability has been resolved: vrf: Fix a potential NPD when removing a port from a VRF RCU readers that identified a net device...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100093)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100093 advisory. In the Linux kernel, the following vulnerability has been resolved: net: fix fanout UAF in packetrelease via NETDEVUP race packetrelease has a race window where...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100356)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100356 advisory. In the Linux kernel, the following vulnerability has been resolved: rose: fix dangling neighbour pointers in rosertdevicedown There are two bugs in rosertdevicedown...

Unity Linux 20.1070e Security Update: python-django (UTSA-2026-099501)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099501 advisory. An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. django.utils.cache.hasvaryheader in Django does not strip leading or trailing whitespace fr...

Oracle Linux 10 : curl (ELSA-2026-55432)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-55432 advisory. - fix proxy environment variable change detection CVE-2026-8927 - fix HTTP Negotiate connection reuse auth bypass CVE-2026-1965 - fix OAuth2 bearer token leak...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101159)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101159 advisory. Sandbox escape due to integer overflow in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147...

Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-099456)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099456 advisory. ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a missing depth check in the...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099966)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099966 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: avoid leaking percpu counter pointers The native and compat get-entries paths...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100748)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100748 advisory. In the Linux kernel, the following vulnerability has been resolved: net: hamradio: 6pack: fix uninit-value in sixpackreceivebuf sixpackreceivebuf does not properly...