Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-099456)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099456 advisory. ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a missing depth check in the...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101159)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101159 advisory. Sandbox escape due to integer overflow in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101331)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101331 advisory. When an email contains multiple attachments with external links via the X-Mozilla-External-Attachment-URL header, only the last link is shown when hovering over any...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099952)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099952 advisory. In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/shtmu: Always leave device running after probe The TMU device can be used as...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101122)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101122 advisory. Denial-of-service in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and...

Unity Linux 20.1070e Security Update: graphite2 (UTSA-2026-099523)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099523 advisory. Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an offset is within the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100746)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100746 advisory. In the Linux kernel, the following vulnerability has been resolved: dm cache policy smq: check allocation under invalidate lock commit 2d1f7b65f5de dm cache policy...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099982)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099982 advisory. In the Linux kernel, the following vulnerability has been resolved: fou: fix initialization of grc The grc must be initialize first. There can be a condition where i...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101320)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101320 advisory. Heap buffer overflow in libvpx. This vulnerability was fixed in Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR 115.32.1, Thunderbird 140.7.2, and Thunderbird...

RHEL 8 : kernel (RHSA-2026:55444)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55444 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: xen: AMD Zen 2 Processors:...

RHEL 8 : kpatch-patch-4_18_0-553_109_1, kpatch-patch-4_18_0-553_125_1, kpatch-patch-4_18_0-553_53_1, kpatch-patch-4_18_0-553_72_1, and kpatch-patch-4_18_0-553_85_1 (RHSA-2026:55762)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55762 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patc...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101093)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101093 advisory. Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101327)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101327 advisory. Use-after-free in MediaTrackGraphImpl::GetInstance. This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4. Tenable h...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101356)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101356 advisory. Memory safety bugs present in Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099925)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099925 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix out-of-bounds access in ipv6findtlv optlen is fetched without checking whether there is...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100544)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100544 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: fix rlimit for posix cpu timers Posix cpu timers requires an additional step beyond...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100500)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100500 advisory. In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: validate MAP frame length before ingress parsing When ingress deaggregation...

RockyLinux 10 : gstreamer1-plugins-good (RLSA-2026:55434)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:55434 advisory. gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux FUJIFILM strd parsing leading to out-of-bounds read/write CVE-2026-73433...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099895)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099895 advisory. In the Linux kernel, the following vulnerability has been resolved: dax: Fix daxmappingrelease use after free A CONFIGDEBUGKOBJECTRELEASE test of removing a device-d...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099742)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099742 advisory. In the Linux kernel, the following vulnerability has been resolved: Revert IB/isert: Fix incorrect release of isert connection Commit: 699826f4e30a IB/isert: Fix...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100136)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100136 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: xhci: tegra: fix sleep in atomic call When we set the dual-role port to Host mode, we observ...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099479)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099479 advisory. Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use searchpath to find user-defined types, including...

Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-099453)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099453 advisory. ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and external delegates due to missing validation checks. Attackers can write...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101107)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101107 advisory. Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100358)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100358 advisory. In the Linux kernel, the following vulnerability has been resolved: ax25: properly unshare skbs in ax25kissrcv Bernard Pidoux reported a regression apparently caused...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101084)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101084 advisory. Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.1...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100387)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100387 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftct: drop pending enqueued packets on removal Packets sitting in nfqueue might hold ...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100952)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100952 advisory. Uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

RHEL 10 : vim (RHSA-2026:55431)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55431 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Arbitrary Code Execution via crafted...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101339)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101339 advisory. Memory safety bugs present in Firefox ESR 115.35.1, Firefox ESR 140.10.1 and Firefox 150.0.1. Some of these bugs showed evidence of memory corruption and we presume...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099960)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099960 advisory. In the Linux kernel, the following vulnerability has been resolved: x86/CPU: Fix FPDSS on Zen1 Zen1's hardware divider can leave, under certain circumstances, partia...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099903)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099903 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx: disable gfx9 cpeccerrorirq only when enabling legacy gfx ras gfx9 cpeccerrorirq i...

Fedora 43 : pdns-recursor (2026-ac51ed6e75)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-ac51ed6e75 advisory. Update to latest upstream version Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100374)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100374 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: fix divide-by-zero in tipcskfilterconnect A user can set conntimeout to any value via...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099691)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099691 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: remove multicast group from hash table on device destruction When a device is destroy...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100159)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100159 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackh323: Add protection for bmp length out of range UBSAN load reports an...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101150)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101150 advisory. Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7. Tenable has...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100881)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100881 advisory. A clickjacking vulnerability could have been used to trick a user into leaking saved payment card details to a malicious page. This vulnerability was fixed in Firefo...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100295)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100295 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cryptmessage when using async crypto The CVE-2024-50047 fix...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101284)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101284 advisory. Same-origin policy bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099941)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099941 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate group add input before caching BUG OCFS2IOCGROUPADD can trigger a BUGON in...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100588)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100588 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/omfs: reject ssysblocksize smaller than OMFSDIRSTART omfsfillsuper rejects oversized...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101125)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101125 advisory. Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and...

Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-099474)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099474 advisory. ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption method when memory allocation fails. Attackers can trigger memory...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100104)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100104 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix potential NULL pointer dereference Klocwork tool reported 'curdsd' may be...

Unity Linux 20.1070e Security Update: gzip (UTSA-2026-099505)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099505 advisory. GNU gzip contains a vulnerability in the gzexe utility related to insecure temporary file handling. When the mktemp utility is not available in the users PATH, gzexe...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101343)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101343 advisory. Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbir...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100368)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100368 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx: disable gfx9 cpeccerrorirq only when enabling legacy gfx ras gfx9 cpeccerrorirq i...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100526)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100526 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix VF2PF work teardown race in adfdisablesriov The VF2PF interrupt handler queues...

RHEL 9 : butane (RHSA-2026:55520)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:55520 advisory. Butane translates human-readable Butane Configs into machine-readable Ignition configs for provisioning operating systems that use Ignition. Securit...