Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100748)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100748 advisory. In the Linux kernel, the following vulnerability has been resolved: net: hamradio: 6pack: fix uninit-value in sixpackreceivebuf sixpackreceivebuf does not properly...

Unity Linux 20.1070e Security Update: python-django (UTSA-2026-099501)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099501 advisory. An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. django.utils.cache.hasvaryheader in Django does not strip leading or trailing whitespace fr...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100746)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100746 advisory. In the Linux kernel, the following vulnerability has been resolved: dm cache policy smq: check allocation under invalidate lock commit 2d1f7b65f5de dm cache policy...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099982)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099982 advisory. In the Linux kernel, the following vulnerability has been resolved: fou: fix initialization of grc The grc must be initialize first. There can be a condition where i...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099972)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099972 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: wacom: Fix OOB write in wacomhidsetdevicemode wacomhidsetdevicemode currently assumes that t...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100373)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100373 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Prevent shift wrapping in setusersqsize The ucmd-logsqbbcount variable is controlled b...

RockyLinux 10 : gstreamer1-plugins-ugly-free (RLSA-2026:55435)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:55435 advisory. gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds read CVE-2026-19389 Tenable ha...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099735)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099735 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing/histograms: Add histograms to histvars if they have referenced variables Hist triggers ca...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101168)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101168 advisory. Memory safety bugs present in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101157)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101157 advisory. Same-origin policy bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100142)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100142 advisory. In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: fix skackbacklog leak on failed handshake When vmcitransportrecvconnectingserver...

RHEL 8 : kernel (RHSA-2026:55444)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55444 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: xen: AMD Zen 2 Processors:...

RHEL 8 : kpatch-patch-4_18_0-553_109_1, kpatch-patch-4_18_0-553_125_1, kpatch-patch-4_18_0-553_53_1, kpatch-patch-4_18_0-553_72_1, and kpatch-patch-4_18_0-553_85_1 (RHSA-2026:55762)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55762 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patc...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100093)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100093 advisory. In the Linux kernel, the following vulnerability has been resolved: net: fix fanout UAF in packetrelease via NETDEVUP race packetrelease has a race window where...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100561)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100561 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh pointer after ipv6hopjumbo ipv6hopjumbo calls pskbtrimrcsum, which can...

RockyLinux 9 : gstreamer1-plugins-good (RLSA-2026:55436)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:55436 advisory. gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux FUJIFILM strd parsing leading to out-of-bounds read/write CVE-2026-73433...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099940)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099940 advisory. In the Linux kernel, the following vulnerability has been resolved: hwmon: occ Fix division by zero in occshowpower1 In occshowpower1 case 1, the accumulator is...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100521)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100521 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: serial: digiacceleport: fix write buffer corruption The digiwriteinbcommand is supposed to...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100348)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100348 advisory. In the Linux kernel, the following vulnerability has been resolved: iio: light: bh1780: fix PM runtime leak on error path Move pmruntimeputautosuspend before the err...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100168)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100168 advisory. In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: Add NULL check in aspeedlpcenablesnoop devmkasprintf returns NULL when memory...

RockyLinux 10 : gstreamer1-plugins-good (RLSA-2026:55434)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:55434 advisory. gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux FUJIFILM strd parsing leading to out-of-bounds read/write CVE-2026-73433...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099959)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099959 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: netem: fix queue limit check to include reordered packets The queue limit check in...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099895)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099895 advisory. In the Linux kernel, the following vulnerability has been resolved: dax: Fix daxmappingrelease use after free A CONFIGDEBUGKOBJECTRELEASE test of removing a device-d...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100691)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100691 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: netem: fix queue limit check to include reordered packets The queue limit check in...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100934)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100934 advisory. Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. Tenable h...

Oracle Linux 10 : gstreamer1-plugins-good (ELSA-2026-55434)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55434 advisory. - Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling Resolves: RHEL-239045 Tenable has extracted the preceding description block...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100939)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100939 advisory. Race condition, use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100388)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100388 advisory. In the Linux kernel, the following vulnerability has been resolved: dm integrity: call kmemcachedestroy in dmintegrityinit error path Otherwise the journaliocache wi...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100572)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100572 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Reject MPA FPDU length underflow before signed receive math A malicious connected siw...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100520)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100520 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: fix out-of-bounds read in broadcast Gap ACK blocks A broadcast PROTOCOL/STATEMSG can carry...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100186)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100186 advisory. In the Linux kernel, the following vulnerability has been resolved: net: phy: leds: fix memory leak A network restart test on a router led to an out-of-memory...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101312)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101312 advisory. Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbir...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100297)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100297 advisory. In the Linux kernel, the following vulnerability has been resolved: dm: clear cloned request bio pointer when last clone bio completes Stale rq-bio values have been...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100094)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100094 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: fix NULL-deref on disconnect Make sure to deregister the controller before dropping...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100384)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100384 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: usbtmc: Use usbbulkmsgkillable with user-specified timeouts The usbtmc driver accepts timeou...

Oracle Linux 9 : gstreamer1-plugins-good (ELSA-2026-55436)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55436 advisory. - Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling Resolves: RHEL-239042 Tenable has extracted the preceding description block...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100569)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100569 advisory. In the Linux kernel, the following vulnerability has been resolved: ip6: vti: Use ip6tnl.net in vti6siocdevprivate. After patch 1/2 in this series, vti6update unlink...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100292)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100292 advisory. In the Linux kernel, the following vulnerability has been resolved: hwmon: occ Fix division by zero in occshowpower1 In occshowpower1 case 1, the accumulator is...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100697)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100697 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix dirtyclusters double decrement on fs shutdown fstests test generic/388 occasionally...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100342)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100342 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: avoid potential buffer over-read in parseapplysbmountoptions Unlike other strings in the ex...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100528)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100528 advisory. In the Linux kernel, the following vulnerability has been resolved: udf: validate VAT header length against the VAT inode size udfloadvat takes the virtual...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100326)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100326 advisory. In the Linux kernel, the following vulnerability has been resolved: virtionet: Fix UAF on dstops when IFFXMITDSTRELEASE is cleared and napitx is false A UAF issue...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100135)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100135 advisory. In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Add alignment check for event ring read pointer Though we do check the event ring...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099710)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099710 advisory. In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Release the VGA arbiter client on registerdevice failure The re-order in the Fixes comm...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: samba (UTSA-2026-100783)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100783 advisory. Unity Link Advisory UTSA-2026-100783 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

RHEL 9 : bind (RHSA-2026:55441)

"The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55441 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100726)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100726 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in crushdecode A message of type CEPHMSGOSDMAP...

Unity Linux 20.1070a Security Update: osbuild-composer (UTSA-2026-101351)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101351 advisory. gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 :pat...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-099242)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099242 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: don't free the ASCONF's own transport in DEL-IP processing sctpprocessasconf caches the...

Unity Linux 20.1070e Security Update: rubygem-excon (UTSA-2026-099493)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099493 advisory. Excon is usable, fast, simple HTTP 1.1 for Ruby. Prior to 1.5.0, Excon's RedirectFollower middleware failed to strip additional sensitive headers when following...