Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100383)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100383 advisory. In the Linux kernel, the following vulnerability has been resolved: rapidio: replace riofreenet with kfree in rioscanallocnet When idtab allocation fails, net is not...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100123)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100123 advisory. In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Sync IRQ works before buffer destruction If something was written to the buffer just...

Unity Linux 20.1070e Security Update: expat (UTSA-2026-099471)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099471 advisory. In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when there is...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101119)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101119 advisory. Other issue in the JavaScript Engine component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101482)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101482 advisory. Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 14...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099715)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099715 advisory. In the Linux kernel, the following vulnerability has been resolved: soc: ti: pruss: Fix double free in prussclkmuxsetup In the prussclkmuxsetup, the...

RHEL 10 : kernel (RHSA-2026:55445)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55445 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: iommu: disable SVA when...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100569)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100569 advisory. In the Linux kernel, the following vulnerability has been resolved: ip6: vti: Use ip6tnl.net in vti6siocdevprivate. After patch 1/2 in this series, vti6update unlink...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101315)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101315 advisory. Incorrect boundary conditions in the DOM: Device Interfaces component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101154)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101154 advisory. Memory safety bugs present in Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence of...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100530)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100530 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: zero chainstack array sashiko reports: looking at ebtables table translation...

Fortinet FortiWeb Content-Encoding WAF Evasion (FG-IR-26-157)

The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-157 advisory. - A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5,...

RHEL 8 : redhat-ds:11 (RHSA-2026:55532)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55532 advisory. Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100171)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100171 advisory. In the Linux kernel, the following vulnerability has been resolved: virtiofs: fix UAF on submount umount iput called from fusereleaseend can Oops if the super block...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099750)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099750 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nfqueue: hold bridge skb-dev while queued brpassframeup rewrites skb-dev from the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100537)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100537 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: caam - use printhexdumpdevel to guard key hex dumps Use printhexdumpdevel for dumping...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100353)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100353 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: message: mptlan: Fix use after free bug in mptlanremove due to race condition mptlanprobe...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100963)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100963 advisory. Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. Tenable h...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100976)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100976 advisory. Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7. Tenable has...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100319)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100319 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91: Fix possible out-of-boundary access at91gpioprobe doesn't check that given OF alia...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100372)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100372 advisory. In the Linux kernel, the following vulnerability has been resolved: regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods drvdata::gpiods is supposed to...

Fortinet Fortigate UI DoS attack (FG-IR-26-162)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-162 advisory. - A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 a...

Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-099455)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099455 advisory. ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a heap buffer overflow occur...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099924)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099924 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Free reuseport cBPF prog after RCU grace period. Eulgyu Kim reported the splat below with a...

Unity Linux 20.1070e Security Update: python-django (UTSA-2026-099500)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099500 advisory. An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. UpdateCacheMiddleware and the cachepage decorator cache responses that vary on cookies when...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099907)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099907 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: policy: fix use-after-free on inexact bin in xfrmpolicybyselctx Fix the race by pruning the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100547)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100547 advisory. In the Linux kernel, the following vulnerability has been resolved: nexthop: fix IPv6 route referencing IPv4 nexthop syzbot reported a panic 1 2. When an IPv6 nextho...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100887)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100887 advisory. Due to insufficient escaping of the newline character in the Copy as cURL feature, an attacker could trick a user into using this command, potentially leading to loc...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099911)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099911 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: core: Limit the length of unkillable synchronous timeouts The usbcontrolmsg, usbbulkmsg, and...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101104)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101104 advisory. An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099737)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099737 advisory. In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: add skbcowdata before in-place crypto llsecdoencryptunauth, llsecdoencryptauth,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100346)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100346 advisory. In the Linux kernel, the following vulnerability has been resolved: openvswitch: validate MPLS set/setmasked payload length validateset accepted OVSKEYATTRMPLS as...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100185)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100185 advisory. In the Linux kernel, the following vulnerability has been resolved: ext2: Check block size validity during mount Check that log of block size stored in the superbloc...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099736)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099736 advisory. In the Linux kernel, the following vulnerability has been resolved: tty: serial: samsungtty: Fix a memory leak in s3c24xxserialgetclk when iterating clk When the bes...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101365)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101365 advisory. Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. Tenable ha...

Unity Linux 20.1070e Security Update: ntfs-3g (UTSA-2026-099494)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099494 advisory. Unity Link Advisory UTSA-2026-099494 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100958)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100958 advisory. Other issue in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099692)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099692 advisory. In the Linux kernel, the following vulnerability has been resolved: mfd: crosec: Delay devsetdrvdata until probe success If ecdeviceprobe fails, crosecclassrelease...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100302)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100302 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Allow UD qptype to join multicast only As for multicast: - The SIDR is the only mode th...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100529)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100529 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ethernet: arc: emac: quiesce interrupts before requesting IRQ Normal RX/TX interrupts are...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100178)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100178 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - check record size in imspcuflashfirmware The len variable comes from the firmwa...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101161)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101161 advisory. Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 14...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-100891)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100891 advisory. The issue was addressed with improved memory handling. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100756)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100756 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Validate wqesize before using it in ibuverbspostsend ibuverbspostsend uses cmd.wqesi...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100499)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100499 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: terminate table name before findtablelock updatecounters and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100386)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100386 advisory. In the Linux kernel, the following vulnerability has been resolved: net: qrtr: Fix an uninit variable access bug in qrtrtxresume Syzbot reported a bug as following:...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099749)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099749 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftct: drop pending enqueued packets on removal Packets sitting in nfqueue might hold ...

Unity Linux 20.1070a Security Update: libpq (UTSA-2026-099554)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099554 advisory. Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. Th...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099912)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099912 advisory. In the Linux kernel, the following vulnerability has been resolved: atm: fore200e: fix use-after-free in tasklets during device removal When the PCA-200E or SBA-200E...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100905)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100905 advisory. Integer overflow in the Networking: JAR component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. Tenable...