Unity Linux 20.1050e / 20.1070e Security Update: wavpack (UTSA-2025-000294)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-000294 advisory. A null pointer dereference bug was found in wavpack-5.4.0 The results from the ASAN log: AddressSanitizer:DEADLYSIGNAL...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100369)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100369 advisory. In the Linux kernel, the following vulnerability has been resolved: net/tcp-md5: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be...

Unity Linux 20.1070e Security Update: libcap (UTSA-2026-099530)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099530 advisory. The PAM module pamcap.so of libcap configuration supports group names starting with @, during actual parsing, configurations not starting with @ are incorrectly...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100138)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100138 advisory. In the Linux kernel, the following vulnerability has been resolved: net: consume xmit errors of GSO frames udpgrofrglist.sh and udpgrobench.sh are the flakiest tests...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101129)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101129 advisory. Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. Tenable has extract...

RHEL 9 : glib2 (RHSA-2026:55440)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55440 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100177)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100177 advisory. In the Linux kernel, the following vulnerability has been resolved: rose: fix dangling neighbour pointers in rosertdevicedown There are two bugs in rosertdevicedown...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100935)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100935 advisory. Mitigation bypass in the Networking: Cache component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. Tenable...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-090701)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090701 advisory. A flaw was found in unrestricted eBPF usage by the BPFBTFLOAD, leading to a possible out-of-bounds memory write in the Linux kernels BPF subsystem due to the way a...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100307)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100307 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible UaF in addrconfpermanentaddr The mentioned helper try to warn the user abo...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100306)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100306 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Check to ensure report responses match the request It is possible for a maliciou...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099752)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099752 advisory. In the Linux kernel, the following vulnerability has been resolved: comedi: Reinit dev-spinlock between attachments to low-level drivers struct comedidevice is the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100379)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100379 advisory. In the Linux kernel, the following vulnerability has been resolved: lib: cpurmap: Avoid use after free on rmap-obj array entries When calling irqsetaffinitynotifier...

Oracle Linux 10 : libXfont2 (ELSA-2026-55448)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55448 advisory. - CVE fix for: CVE-2026-59679 Resolves: https://redhat.atlassian.net/browse/RHEL-221949 Tenable has extracted the preceding description block directl...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101169)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101169 advisory. LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In versions 1.2.1 through...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101099)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101099 advisory. Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. Tenable h...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100335)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100335 advisory. In the Linux kernel, the following vulnerability has been resolved: xfs: fix freemap adjustments when adding xattrs to leaf blocks xfs/592 and xfs/794 both trip thi...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cups-filters (UTSA-2026-100782)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100782 advisory. A flaw was found in libcupsfilters and cups-filters. The PNG image reading function creates a libpng reader without installing an error recovery handler, causing the...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100908)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100908 advisory. Same-origin policy bypass in the Networking: JAR component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101116)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101116 advisory. Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5. Tenable...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100916)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100916 advisory. Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbi...

RHEL 8 : pcp (RHSA-2026:55560)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55560 advisory. Performance Co-Pilot PCP is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance...

Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-099507)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099507 advisory. ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, an integer overflow in the X...

Linux Distros Unpatched Vulnerability : CVE-2026-16742

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user CVE-2026-16742 Note that...

Unity Linux 20.1070e Security Update: ntfs-3g (UTSA-2026-099484)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099484 advisory. Unity Link Advisory UTSA-2026-099484 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101323)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101323 advisory. Memory safety bugs present in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence of memory corruption and ...

Unity Linux 20.1070e Security Update: perl-Mojolicious (UTSA-2026-099533)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099533 advisory. Mojo::JSON versions before 9.47 for Perl allow memory exhaustion via unbounded recursion in the pure-Perl decoder. The pure-Perl decode path decodevalue dispatching ...

Unity Linux 20.1070e Security Update: python-filelock (UTSA-2026-099470)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099470 advisory. filelock is a platform-independent file lock for Python. In versions prior to 3.20.1, a Time-of-Check- Time-of-Use TOCTOU race condition allows local attackers to...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100360)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100360 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix potential NULL pointer dereference in header processing If siwgethdr returns -EINVA...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100714)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100714 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/exynos: vidi: use priv-vididev for ctx lookup in vidiconnectionioctl vidiconnectionioctl...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100341)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100341 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: reject mount if bigalloc with sfirstdatablock != 0 bigalloc with sfirstdatablock != 0 is no...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100140)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100140 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: fix rlimit for posix cpu timers Posix cpu timers requires an additional step beyond...

Oracle Linux 9 : 389-ds-base (ELSA-2026-55423)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55423 advisory. - Resolves: RHEL-183082 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check rhel-9.8.z - Resolves:...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101136)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101136 advisory. Use-after-free in the Widget: Cocoa component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. Tenable has...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mozjs78 (UTSA-2024-002119)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-002119 advisory. A mishandled security check when creating a WebSocket in a WebWorker caused the Content Security Policy connect-src header to be ignored. This could lead to...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100322)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100322 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: dummy-hcd: Fix locking/synchronization error Syzbot testing was able to provoke an addressin...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: mozjs78 (UTSA-2024-003380)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-003380 advisory. xmltokimpl.c in Expat aka libexpat before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-101106)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101106 advisory. This issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26....

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-101151)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101151 advisory. The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1,...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-101360)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101360 advisory. A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101364)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101364 advisory. Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbir...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099947)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099947 advisory. In the Linux kernel, the following vulnerability has been resolved: EFI/CPER: don't dump the entire memory region The current logic at cperprintfwerr doesn't check i...

Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-099476)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099476 advisory. ImageMagick before 7.1.2-26 and 6.9.13-51 is missing a check for the allowed memory allocation limit in matrix-backed operations such as -canny. An attacker can supp...

Linux Distros Unpatched Vulnerability : CVE-2026-19967

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security flaw has been discovered in Open Asset Import Library Assimp 17c12da. Impacted is the function Assimp::Compression::decompressBlock of the file...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099741)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099741 advisory. In the Linux kernel, the following vulnerability has been resolved: nullblk: Always check queue mode setting from configfs Make sure to check device queue mode in th...

RockyLinux 8 : 389-ds:1.4 (RLSA-2026:55530)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:55530 advisory. 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check CVE-2026-11770 389-ds-base: 389-ds-base: NULL pointer dereference i...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100313)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100313 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackh323: fix OOB read in decodechoice In decodechoice, the boundary check...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101172)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101172 advisory. Information disclosure due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1,...

Unity Linux 20.1070e Security Update: python-django (UTSA-2026-099532)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099532 advisory. An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14. Response headers do not vary on cookies if a session is not modified, but SESSIONSAVEEVERYREQUEST ...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100153)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100153 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/tegra: Fix a possible null pointer dereference In tegracrtcreset, new memory is allocated wit...