Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100491)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100491 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate RSA CRT component lengths The generic RSA key parser rsahelper.c bounds ea...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100576)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100576 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: stub: Reject I2C block transfers with invalid length The I2CSMBUSI2CBLOCKDATA case in stubxf...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100933)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100933 advisory. Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149,...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100163)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100163 advisory. In the Linux kernel, the following vulnerability has been resolved: phy: tegra: xusb: Clear the driver reference in usb-phy dev For the dual-role port, it will assig...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101349)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101349 advisory. Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100330)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100330 advisory. In the Linux kernel, the following vulnerability has been resolved: atm: fore200e: fix use-after-free in tasklets during device removal When the PCA-200E or SBA-200E...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100724)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100724 advisory. In the Linux kernel, the following vulnerability has been resolved: quota: Fix race of dquotscanactive with quota deactivation dquotscanactive can race with quota...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gstreamer1-plugins-good (UTSA-2026-022355)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022355 advisory. GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099465)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099465 advisory. Improper validation of type oidvector in PostgreSQL allows a database user to disclose a few bytes of server memory. We have not ruled out viability of attacks that...

Unity Linux 20.1070e Security Update: NetworkManager (UTSA-2026-099514)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099514 advisory. A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager's dhclient backend when processing malformed Manufacturer...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-101167)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101167 advisory. This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100749)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100749 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: sit: reload inner IPv6 header after GSO offloads ipip6tunnelxmit caches the inner IPv6 head...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mozjs78 (UTSA-2024-002120)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-002120 advisory. Navigations were being allowed when dragging a URL from a cross-origin iframe into the same tab which could lead to website spoofing attacks. This vulnerability...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100518)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100518 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: bound Read Response placement to the RREAD length In drivers/infiniband/sw/siw/siwqprx....

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100385)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100385 advisory. In the Linux kernel, the following vulnerability has been resolved: net: wan/fslucchdlc: Fix dmafreecoherent in uhdlcmemclean The priv-rxbuffer and priv-txbuffer are...

Unity Linux 20.1070e Security Update: expat (UTSA-2026-099518)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099518 advisory. libexpat before 2.8.2 has an integer overflow in XMLParseBuffer because it lacked a check that was present in XMLParse. Tenable has extracted the preceding descripti...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099713)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099713 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Bound iscsiencodetextoutput appends to rspbuf iscsiencodetextoutput...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099754)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099754 advisory. In the Linux kernel, the following vulnerability has been resolved: net/smc: fix double-free of smcspdpriv when tee duplicates splice pipe buffer smcrxsplice allocat...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099716)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099716 advisory. In the Linux kernel, the following vulnerability has been resolved: power: supply: rt9455: Fix use-after-free in powersupplychanged Using the devm variant for...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101290)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101290 advisory. Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. Tenab...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-101282)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101282 advisory. An authorization issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4,...

Unity Linux 20.1050e / 20.1070e Security Update: wavpack (UTSA-2025-000294)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-000294 advisory. A null pointer dereference bug was found in wavpack-5.4.0 The results from the ASAN log: AddressSanitizer:DEADLYSIGNAL...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100369)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100369 advisory. In the Linux kernel, the following vulnerability has been resolved: net/tcp-md5: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be...

Unity Linux 20.1070e Security Update: libcap (UTSA-2026-099530)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099530 advisory. The PAM module pamcap.so of libcap configuration supports group names starting with @, during actual parsing, configurations not starting with @ are incorrectly...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100138)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100138 advisory. In the Linux kernel, the following vulnerability has been resolved: net: consume xmit errors of GSO frames udpgrofrglist.sh and udpgrobench.sh are the flakiest tests...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101129)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101129 advisory. Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. Tenable has extract...

RHEL 9 : glib2 (RHSA-2026:55440)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55440 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100177)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100177 advisory. In the Linux kernel, the following vulnerability has been resolved: rose: fix dangling neighbour pointers in rosertdevicedown There are two bugs in rosertdevicedown...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100935)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100935 advisory. Mitigation bypass in the Networking: Cache component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. Tenable...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-090701)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090701 advisory. A flaw was found in unrestricted eBPF usage by the BPFBTFLOAD, leading to a possible out-of-bounds memory write in the Linux kernels BPF subsystem due to the way a...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100950)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100950 advisory. Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. Tenable has extract...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099724)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099724 advisory. In the Linux kernel, the following vulnerability has been resolved: xfs: save ailp before dropping the AIL lock in push callbacks In xfsinodeitempush and...

RHEL 9 : 389-ds-base (RHSA-2026:55423)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55423 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101301)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101301 advisory. Privilege escalation in the Security component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. Tenable has...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100119)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100119 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Prefer NLANULSTRING These attributes are evaluated as c-string passed to strcmp, but...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100363)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100363 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: raspberrypi-ts - fix refcount leak in rpitsprobe rpifirmwareget take reference, we need to...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100936)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100936 advisory. Integer overflow in the Networking: JAR component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. Tenable...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101480)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101480 advisory. Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. Tenabl...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100189)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100189 advisory. In the Linux kernel, the following vulnerability has been resolved: SUNRPC: authgss: fix memory leaks in XDR decoding error paths The gssxdecctx, gssxdecstatus, and...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100145)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100145 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: Prevent TOCTOU out-of-bounds write For the following path not holding the sock lock,...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100102)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100102 advisory. In the Linux kernel, the following vulnerability has been resolved: hfs: validate record offset in hfsplusbmapalloc hfsplusbmapalloc can trigger a crash if a record...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100973)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100973 advisory. Privilege escalation in the Messaging System component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and...

Unity Linux 20.1070e Security Update: python-django (UTSA-2026-099481)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099481 advisory. An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. django.contrib.gis.gdal.GDALRaster over-reads its in-memory buffer when constructed from a...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099970)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099970 advisory. In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache Make sure resource...

AlmaLinux 9 : .NET 8.0 (ALSA-2026:54574)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:54574 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET Deni...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099722)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099722 advisory. In the Linux kernel, the following vulnerability has been resolved: ip6: vti: Use ip6tnl.net in vti6changelink. ip netns add ns1 ip netns add ns2 ip -n ns1 link add...

Unity Linux 20.1070e Security Update: edk2 (UTSA-2026-099522)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099522 advisory. Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL pointer...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099913)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099913 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: reject mount if bigalloc with sfirstdatablock != 0 bigalloc with sfirstdatablock != 0 is no...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100589)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100589 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: Check for underflow in xfrmstatemtu Leo Lin reported OOB write issue in esp component:...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100532)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100532 advisory. In the Linux kernel, the following vulnerability has been resolved: sched/rt: Have RTPUSHIPI be default off for non PREEMPTRT RT migration is done aggressively. When...