Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100334)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100334 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: bfa: Double-free fix When the bfadimprobe function fails during initialization, the memory...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101297)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101297 advisory. Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100103)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100103 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: reject immediate NFQUEUE verdict nftqueue is always used from userspace...

Oracle Linux 10 : 389-ds-base (ELSA-2026-55424)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55424 advisory. - Resolves: RHEL-183075 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check rhel-10.2.z - Resolves:...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100971)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100971 advisory. Mitigation bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. Tenable...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100320)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100320 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: fix bcackers underflow on duplicate GRPACKMSG The GRPACKMSG handler in tipcgroupprotorcv...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099740)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099740 advisory. In the Linux kernel, the following vulnerability has been resolved: mtd: docg3: fix use-after-free in docg3release In docg3release, the docg3 pointer is obtained fro...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101487)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101487 advisory. Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7. Tenable ha...

RHEL 8 : 389-ds:1.4 (RHSA-2026:55530)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55530 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100101)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100101 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Add TMF to tmrlist handling An abort that is responded to by iSCSI itself is...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099892)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099892 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: iscsitcp: Check that sock is valid before iscsisetparam The validity of sock should be...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100161)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100161 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in bpfeventoutput We received report 1 of kernel crash, which is caused b...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100768)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100768 advisory. In the Linux kernel, the following vulnerability has been resolved: MIPS: Work around LLVM bug when gp is used as global register variable On MIPS, currentthreadinfo...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100695)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100695 advisory. In the Linux kernel, the following vulnerability has been resolved: mtd: docg3: fix use-after-free in docg3release In docg3release, the docg3 pointer is obtained fro...

Progress MOVEit Transfer < 2025.0.7 / 2025.1.x < 2025.1.3 Multiple Vulnerabilities

The version of Progress MOVEit Transfer installed on the remote host is prior to 2025.0.7 or 2025.1.x prior to 2025.1.3. It is, therefore, affected by multiple vulnerabilities, including: - Improper Neutralization of Special Elements in Data Query Logic vulnerability in Progress MOVEit Transfer...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100303)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100303 advisory. In the Linux kernel, the following vulnerability has been resolved: nouveau/dpcd: return EBUSY for aux xfer if the device is asleep If we have runtime suspended, and...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101081)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101081 advisory. Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. Tenabl...

Unity Linux 20.1070e Security Update: binutils (UTSA-2026-099499)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099499 advisory. A vulnerability has been found in GNU Binutils 2.45. This impacts the function bfdelfgcrecordvtentry of the file bfd/elflink.c of the component Linker. The...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100763)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100763 advisory. In the Linux kernel, the following vulnerability has been resolved: power: supply: bq25980: Fix use-after-free in powersupplychanged Using the devm variant for...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100331)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100331 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev: rivafb: fix divide error in nv3arb A userspace program can trigger the RIVA NV3 arbitratio...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099986)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099986 advisory. In the Linux kernel, the following vulnerability has been resolved: ceph: supply snapshot context in cephzeropartialobject The cephzeropartialobject function was...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100501)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100501 advisory. In the Linux kernel, the following vulnerability has been resolved: net: usb: net1080: validate packetlen before pad-byte access in rxfixup For an even packetlen,...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101321)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101321 advisory. Privilege escalation in the Networking component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. Tenable h...

Unity Linux 20.1070e Security Update: log4j (UTSA-2026-099531)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099531 advisory. Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON. This issue...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101124)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101124 advisory. Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101127)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101127 advisory. Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. Tenable ha...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-101140)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101140 advisory. This issue was addressed through improved state management. This issue is fixed in Safari 26.3, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. A website...

Unity Linux 20.1070a Security Update: osbuild-composer (UTSA-2026-101489)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101489 advisory. Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100883)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100883 advisory. Thunderbird's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by manipulating the file-locking behavior. By...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101313)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101313 advisory. Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. Tenable has extract...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101173)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101173 advisory. Incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

Unity Linux 20.1070a Security Update: postgresql-jdbc (UTSA-2026-099549)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099549 advisory. pgjdbc is an open source postgresql JDBC Driver. From version 42.2.0 to before version 42.7.11, pgjdbc is vulnerable to a client-side denial of service during...

Unity Linux 20.1070e Security Update: expat (UTSA-2026-099475)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099475 advisory. libexpat before 2.8.2 has an integer overflow in copyString. Tenable has extracted the preceding description block directly from the Unity Linux security advisory...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101325)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101325 advisory. Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ES...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100106)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100106 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp. syzkaller reported 0 memory leak...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100308)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100308 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ipv6: ndisc: fix ndiscrauseropt to initialize nduseroptpadX fields to zero to prevent an...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100365)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100365 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode Commit...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101102)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101102 advisory. Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101361)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101361 advisory. Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enou...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099973)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099973 advisory. In the Linux kernel, the following vulnerability has been resolved: nouveau/dpcd: return EBUSY for aux xfer if the device is asleep If we have runtime suspended, and...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100923)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100923 advisory. Use-after-free in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. Tenable has extract...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101090)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101090 advisory. We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox...

Progress MOVEit Transfer < 2025.0.8 / 2025.1.x < 2025.1.4 Path Equivalence (CVE-2026-8801)

The version of Progress MOVEit Transfer installed on the remote host is prior to 2025.0.8 or 2025.1.x prior to 2025.1.4. It is, therefore, affected by a path equivalence vulnerability: - Path equivalence vulnerability in Progress MOVEit Transfer File Upload modules. CVE-2026-8801 Note that Nessus...

Unity Linux 20.1070e Security Update: ntfs-3g (UTSA-2026-099478)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099478 advisory. Unity Link Advisory UTSA-2026-099478 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101375)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101375 advisory. Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. Tenable...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100350)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100350 advisory. In the Linux kernel, the following vulnerability has been resolved: net/rds: No shortcut out of RDSCONNERROR RDS connections carry a state rdsconnpath::cpstate and...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101082)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101082 advisory. Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbi...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101080)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101080 advisory. Same-origin policy bypass in the Networking: DNS component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

Unity Linux 20.1070a Security Update: osbuild-composer (UTSA-2026-100894)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100894 advisory. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is us...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099761)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099761 advisory. In the Linux kernel, the following vulnerability has been resolved: pwm: lpc32xx: Remove handling of PWM channels Because LPC32xx PWM controllers have only a single...