Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100544)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100544 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: fix rlimit for posix cpu timers Posix cpu timers requires an additional step beyond...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100494)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100494 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: remove multicast group from hash table on device destruction When a device is destroy...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099715)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099715 advisory. In the Linux kernel, the following vulnerability has been resolved: soc: ti: pruss: Fix double free in prussclkmuxsetup In the prussclkmuxsetup, the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100587)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100587 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: validate extension header length before copying to cmsg ip6datagramrecvspecificctl builds...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101329)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101329 advisory. Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory...

Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-099498)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099498 advisory. ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles. Attackers can craft malicious image...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101482)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101482 advisory. Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 14...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100127)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100127 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: frndis: Protect RNDIS options with mutex The class/subclass/protocol options are...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101327)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101327 advisory. Use-after-free in MediaTrackGraphImpl::GetInstance. This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4. Tenable h...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101356)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101356 advisory. Memory safety bugs present in Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100502)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100502 advisory. In the Linux kernel, the following vulnerability has been resolved: mfd: crosec: Delay devsetdrvdata until probe success If ecdeviceprobe fails, crosecclassrelease...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101105)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101105 advisory. Thunderbird parses addresses in a way that can allow sender spoofing in case the server allows an invalid From address to be used. For example, if the From header...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100716)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100716 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: serial: ioti: fix heap overflow in buildi2cfwhdr buildi2cfwhdr allocates a fixed-size buffer...

RHEL 10 : libXfont2 (RHSA-2026:55448)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55448 advisory. X.Org X11 libXfont2 runtime library Security Fixes: libxfont2: Font Server Client encoding Out-Of-Bounds Read/Write CVE-2026-59679...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099925)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099925 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix out-of-bounds access in ipv6findtlv optlen is fetched without checking whether there is...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100150)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100150 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Improve SCSI abort handling The following has been observed on a test setup:...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101332)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101332 advisory. Thunderbird's handling of the X-Mozilla-External-Attachment-URL header can be exploited to execute JavaScript in the file:/// context. By crafting a nested email...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099960)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099960 advisory. In the Linux kernel, the following vulnerability has been resolved: x86/CPU: Fix FPDSS on Zen1 Zen1's hardware divider can leave, under certain circumstances, partia...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100171)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100171 advisory. In the Linux kernel, the following vulnerability has been resolved: virtiofs: fix UAF on submount umount iput called from fusereleaseend can Oops if the super block...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100358)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100358 advisory. In the Linux kernel, the following vulnerability has been resolved: ax25: properly unshare skbs in ax25kissrcv Bernard Pidoux reported a regression apparently caused...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101107)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101107 advisory. Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...

Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-099453)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099453 advisory. ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and external delegates due to missing validation checks. Attackers can write...

Unity Linux 20.1070e Security Update: ghostscript (UTSA-2026-099527)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099527 advisory. A vulnerability was found in Artifex GhostPDL up to 3989415a5b8e99b9d1b87cc9902bde9b7cdea145. It has been classified as problematic. This affects the function...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100573)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100573 advisory. In the Linux kernel, the following vulnerability has been resolved: signal: clear JOBCTLPENDINGMASK for caller in zapotherthreads When a multi-threaded process...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100558)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100558 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix use after free in debug code We're not allowed to dereference urb after calling...

RHEL 10 : gstreamer1-plugins-ugly-free (RHSA-2026:55435)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:55435 advisory. GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins whose license is...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099750)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099750 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nfqueue: hold bridge skb-dev while queued brpassframeup rewrites skb-dev from the...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100099)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100099 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nfsetpipapoavx2: fix initial map fill If the first field doesn't cover the entire star...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100715)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100715 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential null-ptr-deref in decodechooseargs A message of type CEPHMSGOSDMAP contain...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099964)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099964 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: topcliff-pch: fix use-after-free on unbind Give the driver a chance to flush its queue befor...

RHEL 10 : vim (RHSA-2026:55431)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55431 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Arbitrary Code Execution via crafted...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101339)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101339 advisory. Memory safety bugs present in Firefox ESR 115.35.1, Firefox ESR 140.10.1 and Firefox 150.0.1. Some of these bugs showed evidence of memory corruption and we presume...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101154)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101154 advisory. Memory safety bugs present in Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence of...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101315)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101315 advisory. Incorrect boundary conditions in the DOM: Device Interfaces component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and...

RHEL 10 : 389-ds-base (RHSA-2026:55425)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55425 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDA...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100530)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100530 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: zero chainstack array sashiko reports: looking at ebtables table translation...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100537)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100537 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: caam - use printhexdumpdevel to guard key hex dumps Use printhexdumpdevel for dumping...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099760)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099760 advisory. In the Linux kernel, the following vulnerability has been resolved: nvme-pci: Fix slab-out-of-bounds in nvmedbbufset dev-onlinequeues is a count incremented in...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101357)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101357 advisory. Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099701)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099701 advisory. In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: fix endpoint use-after-free in rmnetdellink rmnetdellink removes the endpoi...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100920)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100920 advisory. A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures. This vulnerability was...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-101148)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101148 advisory. A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macO...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100941)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100941 advisory. Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100136)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100136 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: xhci: tegra: fix sleep in atomic call When we set the dual-role port to Host mode, we observ...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099742)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099742 advisory. In the Linux kernel, the following vulnerability has been resolved: Revert IB/isert: Fix incorrect release of isert connection Commit: 699826f4e30a IB/isert: Fix...

RHEL 10 : kernel (RHSA-2026:55445)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55445 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: iommu: disable SVA when...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099479)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099479 advisory. Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use searchpath to find user-defined types, including...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101336)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101336 advisory. Thunderbird processes the X-Mozilla-External-Attachment-URL header to handle attachments which can be hosted externally. When an email is opened, Thunderbird accesse...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100747)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100747 advisory. In the Linux kernel, the following vulnerability has been resolved: efi/capsule-loader: fix incorrect sizeof in phys array reallocation The krealloc call for...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101316)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101316 advisory. Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7. Tenable ha...