Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-100954)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100954 advisory. This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099525)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099525 advisory. Externally-controlled format string in PostgreSQL timeofday function allows an attacker to retrieve portions of server memory, via crafted timezone zones. Versions...

RockyLinux 9 : 389-ds-base (RLSA-2026:55423)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:55423 advisory. 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check CVE-2026-11770 389-ds-base: 389-ds-base: NULL pointer dereference i...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100946)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100946 advisory. Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 15...

Unity Linux 20.1070e Security Update: ghostscript (UTSA-2026-099516)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099516 advisory. Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure observable in a constructed BaseFont name in the function pdfbasefontalloc. Tenable has...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-100929)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100929 advisory. A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling. Tenable has extracted the...

Unity Linux 20.1070e Security Update: util-linux (UTSA-2026-099510)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099510 advisory. A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100510)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100510 advisory. In the Linux kernel, the following vulnerability has been resolved: usbnet: gl620a: fix out-of-bounds read in genelinkrxfixup genelinkrxfixup splits an aggregated R...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100345)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100345 advisory. In the Linux kernel, the following vulnerability has been resolved: iio: gyro: mpu3050: Move iiodeviceregister to correct location iiodeviceregister should be at the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100549)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100549 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: guard option walkers against 1-byte tail reads When the last byte of options ...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101363)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101363 advisory. Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and...

RockyLinux 10 : 389-ds-base (RLSA-2026:55424)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:55424 advisory. 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check CVE-2026-11770 389-ds-base: 389-ds-base: NULL pointer dereference ...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-100912)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100912 advisory. A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099784)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099784 advisory. In the Linux kernel, the following vulnerability has been resolved: ubi: Fix use-after-free when volume resizing failed There is an use-after-free problem reported b...

Unity Linux 20.1070e Security Update: expat (UTSA-2026-099488)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099488 advisory. xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId. Tenable has extracted the preceding description block directly from the Unity Linux securi...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099466)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099466 advisory. Untrusted data inclusion in pgdump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client...

Unity Linux 20.1070a Security Update: libpq (UTSA-2026-099548)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099548 advisory. Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099915)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099915 advisory. In the Linux kernel, the following vulnerability has been resolved: misc: pciendpointtest: Free IRQs before removing the device In pciendpointtestremove, freeing the...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099974)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099974 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/atmel-hlcdc: fix use-after-free of drmcrtccommit after release The...

Unity Linux 20.1070e Security Update: GraphicsMagick (UTSA-2026-099444)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099444 advisory. Unity Link Advisory UTSA-2026-099444 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100506)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100506 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: validate STALECOOKIE cause length before reading staleness When an ERROR chunk with a...

Linux Distros Unpatched Vulnerability : CVE-2026-19968

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness has been identified in Open Asset Import Library Assimp 17c12da. The affected element is the function Assimp::MDLImporter::ReadFaces3DGSMDL7 in the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100329)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100329 advisory. In the Linux kernel, the following vulnerability has been resolved: xfs: delete attr leaf freemap entries when empty Back in commit 2a2b5932db6758 xfs: fix attr leaf...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100180)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100180 advisory. In the Linux kernel, the following vulnerability has been resolved: wireguard: receive: annotate data-race around receivingcounter.counter Syzkaller with KCSAN...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099891)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099891 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: fix use-after-free on linked stream runtime in sndpcmdrain In the drain loop, the loca...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100381)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100381 advisory. In the Linux kernel, the following vulnerability has been resolved: ext2: Check block size validity during mount Check that log of block size stored in the superbloc...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100930)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100930 advisory. JIT miscompilation, use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8,...

Unity Linux 20.1070e Security Update: ntfs-3g (UTSA-2026-099472)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099472 advisory. Unity Link Advisory UTSA-2026-099472 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099946)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099946 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: bcm-qspi: return error if neither hifmspi nor mspi is available If neither a hifmspi nor msp...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-100895)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100895 advisory. A privacy issue was addressed with improved handling of files. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3. Copying a URL from W...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101293)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101293 advisory. Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100349)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100349 advisory. In the Linux kernel, the following vulnerability has been resolved: sfc: fix crash when reading stats while NIC is resetting efxnetstats .ndogetstats64 can be called...

RockyLinux 9 : glib2 (RLSA-2026:55440)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:55440 advisory. glib: buffer over-read in glib/gvariant-serialiser.c via gvstupleisnormal CVE-2026-58010 glib: out-of-bounds read in glib/gdatetime.c:gdatetimegetymd vi...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100121)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100121 advisory. In the Linux kernel, the following vulnerability has been resolved: net: qrtr: replace qrtrtxflow radixtree with xarray to fix memory leak radixtreecreate allocates...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: udisks2 (UTSA-2026-090565)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090565 advisory. A vulnerability found in udisks2. This flaw allows an attacker to input a specially crafted image file/USB leading to kernel panic. The highest threat from this...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100321)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100321 advisory. In the Linux kernel, the following vulnerability has been resolved: erofs: stop parsing non-compact HEAD index if clusterofs is invalid Syzbot generated a crafted...

Unity Linux 20.1070e Security Update: pam (UTSA-2026-099450)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099450 advisory. Linux-PAM through 1.7.2 contains an observable timing discrepancy CWE-208 in the pamuserdb module's plaintext-password comparison path in modules/pamuserdb/pamuserdb...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099983)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099983 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix crash in nfsd4readrelease When tracing is enabled, the tracenfsdreaddone trace point...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100154)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100154 advisory. In the Linux kernel, the following vulnerability has been resolved: net/x25: Fix potential double free of skb When allocskb fails in x25queuerxframe it calls...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100736)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100736 advisory. In the Linux kernel, the following vulnerability has been resolved: pstore/ram: fix buffer overflow in persistentramsaveold persistentramsaveold can be called multip...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101376)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101376 advisory. Integer overflow in the SVG component. This vulnerability was fixed in Firefox 143, Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101118)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101118 advisory. A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a...

Unity Linux 20.1070e Security Update: expat (UTSA-2026-099486)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099486 advisory. libexpat before 2.8.2 has an integer overflow in addBinding. Tenable has extracted the preceding description block directly from the Unity Linux security advisory...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100928)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100928 advisory. Memory safety bugs present in Firefox ESR 115.35, Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that wit...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-101138)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101138 advisory. The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5...

Tanium Server 7.7.3.x < 7.7.3.8298 / 7.8.2.x < 7.8.2.1198 / 7.8.4.x < 7.8.4.1327 UI Misrepresentation (TAN-2026-017)

The version of Tanium Server installed on the remote host is 7.7.3.x prior to 7.7.3.8298, 7.8.2.x prior to 7.8.2.1198, or 7.8.4.x prior to 7.8.4.1327. It is, therefore, affected by a vulnerability: - A UI misrepresentation of critical information vulnerability could allow an authenticated Tanium...

Unity Linux 20.1070e Security Update: ntfs-3g (UTSA-2026-099489)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099489 advisory. Unity Link Advisory UTSA-2026-099489 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

RockyLinux 9 : bind9.18 (RLSA-2026:55442)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:55442 advisory. bind9: bind: Potential wildcard CNAME RPZ policy bypass CVE-2026-11331 bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099765)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099765 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: do not update mtu if msgmax is too small in mtu negotiation When doing link mtu negotiation...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101484)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101484 advisory. Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. Tenable ha...