Unity Linux 20.1070e Security Update: expat (UTSA-2026-099518)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099518 advisory. libexpat before 2.8.2 has an integer overflow in XMLParseBuffer because it lacked a check that was present in XMLParse. Tenable has extracted the preceding descripti...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099713)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099713 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Bound iscsiencodetextoutput appends to rspbuf iscsiencodetextoutput...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100145)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100145 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: Prevent TOCTOU out-of-bounds write For the following path not holding the sock lock,...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099716)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099716 advisory. In the Linux kernel, the following vulnerability has been resolved: power: supply: rt9455: Fix use-after-free in powersupplychanged Using the devm variant for...

Unity Linux 20.1060a / 20.1070a Security Update: gstreamer1-plugins-bad-free (UTSA-2026-101094)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101094 advisory. A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin. During a DTLS handshake, the peer certificate Subject Distinguished Name is printed into ...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: docker (UTSA-2026-050390)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-050390 advisory. Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privilege validation to be bypass...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100119)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100119 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Prefer NLANULSTRING These attributes are evaluated as c-string passed to strcmp, but...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100189)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100189 advisory. In the Linux kernel, the following vulnerability has been resolved: SUNRPC: authgss: fix memory leaks in XDR decoding error paths The gssxdecctx, gssxdecstatus, and...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-101282)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101282 advisory. An authorization issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4,...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100173)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100173 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: make ebtsnat ARP rewrite writable The ebtables SNAT target keeps the Ethernet...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101290)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101290 advisory. Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. Tenab...

Unity Linux 20.1070e Security Update: libcap (UTSA-2026-099530)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099530 advisory. The PAM module pamcap.so of libcap configuration supports group names starting with @, during actual parsing, configurations not starting with @ are incorrectly...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100138)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100138 advisory. In the Linux kernel, the following vulnerability has been resolved: net: consume xmit errors of GSO frames udpgrofrglist.sh and udpgrobench.sh are the flakiest tests...

Unity Linux 20.1050e / 20.1070e Security Update: wavpack (UTSA-2025-000294)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-000294 advisory. A null pointer dereference bug was found in wavpack-5.4.0 The results from the ASAN log: AddressSanitizer:DEADLYSIGNAL...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100369)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100369 advisory. In the Linux kernel, the following vulnerability has been resolved: net/tcp-md5: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-101167)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101167 advisory. This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1,...

RHEL 9 : 389-ds-base (RHSA-2026:55423)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55423 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101301)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101301 advisory. Privilege escalation in the Security component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. Tenable has...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100385)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100385 advisory. In the Linux kernel, the following vulnerability has been resolved: net: wan/fslucchdlc: Fix dmafreecoherent in uhdlcmemclean The priv-rxbuffer and priv-txbuffer are...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099465)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099465 advisory. Improper validation of type oidvector in PostgreSQL allows a database user to disclose a few bytes of server memory. We have not ruled out viability of attacks that...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100724)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100724 advisory. In the Linux kernel, the following vulnerability has been resolved: quota: Fix race of dquotscanactive with quota deactivation dquotscanactive can race with quota...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gstreamer1-plugins-good (UTSA-2026-022355)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022355 advisory. GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100330)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100330 advisory. In the Linux kernel, the following vulnerability has been resolved: atm: fore200e: fix use-after-free in tasklets during device removal When the PCA-200E or SBA-200E...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mozjs78 (UTSA-2024-002120)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-002120 advisory. Navigations were being allowed when dragging a URL from a cross-origin iframe into the same tab which could lead to website spoofing attacks. This vulnerability...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100518)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100518 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: bound Read Response placement to the RREAD length In drivers/infiniband/sw/siw/siwqprx....

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099724)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099724 advisory. In the Linux kernel, the following vulnerability has been resolved: xfs: save ailp before dropping the AIL lock in push callbacks In xfsinodeitempush and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100749)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100749 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: sit: reload inner IPv6 header after GSO offloads ipip6tunnelxmit caches the inner IPv6 head...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100950)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100950 advisory. Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. Tenable has extract...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100163)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100163 advisory. In the Linux kernel, the following vulnerability has been resolved: phy: tegra: xusb: Clear the driver reference in usb-phy dev For the dual-role port, it will assig...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100933)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100933 advisory. Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149,...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101155)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101155 advisory. Same-origin policy bypass in the Layout component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3. Tenable ha...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100531)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100531 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix acpinfitinit error cleanup If acpinfitinit fails after adding the acpidesc...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099913)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099913 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: reject mount if bigalloc with sfirstdatablock != 0 bigalloc with sfirstdatablock != 0 is no...

Unity Linux 20.1070e Security Update: python-django (UTSA-2026-099481)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099481 advisory. An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. django.contrib.gis.gdal.GDALRaster over-reads its in-memory buffer when constructed from a...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100936)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100936 advisory. Integer overflow in the Networking: JAR component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. Tenable...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100102)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100102 advisory. In the Linux kernel, the following vulnerability has been resolved: hfs: validate record offset in hfsplusbmapalloc hfsplusbmapalloc can trigger a crash if a record...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101480)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101480 advisory. Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. Tenabl...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101326)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101326 advisory. Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefo...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100363)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100363 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: raspberrypi-ts - fix refcount leak in rpitsprobe rpifirmwareget take reference, we need to...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100491)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100491 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate RSA CRT component lengths The generic RSA key parser rsahelper.c bounds ea...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100576)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100576 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: stub: Reject I2C block transfers with invalid length The I2CSMBUSI2CBLOCKDATA case in stubxf...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100177)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100177 advisory. In the Linux kernel, the following vulnerability has been resolved: rose: fix dangling neighbour pointers in rosertdevicedown There are two bugs in rosertdevicedown...

AlmaLinux 9 : .NET 8.0 (ALSA-2026:54574)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:54574 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET Deni...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099722)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099722 advisory. In the Linux kernel, the following vulnerability has been resolved: ip6: vti: Use ip6tnl.net in vti6changelink. ip netns add ns1 ip netns add ns2 ip -n ns1 link add...

Oracle Linux 10 : gstreamer1-plugins-bad-free (ELSA-2026-55433)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-55433 advisory. - Fix ADPCM decoder input validation CVE-2026-19387 Resolves: RHEL-235500 - Fix rfbsrc hextile and color read handling for non-32bpp pixel formats...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099758)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099758 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: csiostor: Fix dereference of null pointer rn The error exit path when rn is NULL ends up...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100914)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100914 advisory. Other issue in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird...

RockyLinux 10 : gstreamer1-plugins-bad-free (RLSA-2026:55433)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:55433 advisory. gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder CVE-2026-19387 Tenable has extracted the preceding...

Unity Linux 20.1070e Security Update: NetworkManager (UTSA-2026-099514)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099514 advisory. A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager's dhclient backend when processing malformed Manufacturer...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-091338)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-091338 advisory. libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the initvlc function, a similar issue to CVE-2013-0868. Tenable has extracted the preceding...