Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099953)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099953 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: usbtmc: Use usbbulkmsgkillable with user-specified timeouts The usbtmc driver accepts timeou...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100570)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100570 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: raw: reject IPHDRINCL packets with ihl ihl 4; err = -EINVAL; if iphlen length goto errorfre...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099932)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099932 advisory. In the Linux kernel, the following vulnerability has been resolved: ipc/shm: serialize orphan cleanup with shmnattch updates shmdestroyorphaned walks the shm idr und...

Unity Linux 20.1070e Security Update: ntfs-3g (UTSA-2026-099504)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099504 advisory. Unity Link Advisory UTSA-2026-099504 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101353)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101353 advisory. Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. Tenable has extract...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100325)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100325 advisory. In the Linux kernel, the following vulnerability has been resolved: net: sched: clsapi: fix tcchainfillnode to initialize tcminfo to zero to prevent an info-leak Whe...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100718)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100718 advisory. In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix possible kfreeskb of ERRPTR After the patch in the Fixes tag, the allocatio...

Unity Linux 20.1070e Security Update: libidn (UTSA-2026-099538)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099538 advisory. GNU libidn before 1.44 is prone to out-of-bounds reads ofuninitialized memory in the ToUnicode APIs because of mishandling inidnatounicodeinternal. The affected code...

Unity Linux 20.1070e Security Update: GraphicsMagick (UTSA-2026-099451)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099451 advisory. GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c, related to an ImportViewPixelArea call. Tenable has extracted the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100590)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100590 advisory. In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix locking in .getsockopt Mirror iucvsocksetsockopt and wrap the whole switch in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099509)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099509 advisory. Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds...

Unity Linux 20.1070e Security Update: ntfs-3g (UTSA-2026-099503)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099503 advisory. Unity Link Advisory UTSA-2026-099503 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099951)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099951 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: don't set EXT4GETBLOCKSCONVERT when splitting before submitting I/O When allocating blocks...

Unity Linux 20.1070e Security Update: elfutils (UTSA-2026-099521)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099521 advisory. A vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function libdwthreadtail in the library libdwalloc.c ...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100922)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100922 advisory. Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbi...

RHEL 9 : haproxy (RHSA-2026:55803)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:55803 advisory. The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fixes: haprox...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100309)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100309 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsit: Free cmds before session free Commands from recovery entries are freed afte...

Unity Linux 20.1070e Security Update: expat (UTSA-2026-099520)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099520 advisory. libexpat before 2.8.2 has an integer overflow in getAttributeId. Tenable has extracted the preceding description block directly from the Unity Linux security advisor...

Unity Linux 20.1070e Security Update: python-django (UTSA-2026-099492)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099492 advisory. An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15. django.http.HttpRequest.getsignedcookie in Django uses a non-injective salt derivation...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099955)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099955 advisory. In the Linux kernel, the following vulnerability has been resolved: bridge: brndsend: linearize skb before parsing ND options brndsend parses neighbour discovery...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100100)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100100 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Prevent shift wrapping in setusersqsize The ucmd-logsqbbcount variable is controlled b...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100706)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100706 advisory. In the Linux kernel, the following vulnerability has been resolved: dm log: fix out-of-bounds write due to regioncount overflow The local variable regioncount in...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100886)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100886 advisory. Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an embed tag. This could have bypassed websi...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099900)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099900 advisory. In the Linux kernel, the following vulnerability has been resolved: net: sched: clsapi: fix tcchainfillnode to initialize tcminfo to zero to prevent an info-leak Whe...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100117)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100117 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: ac97: Fix possible NULL dereference in sndac97mixer smatch error:...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100949)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100949 advisory. Spoofing issue in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099730)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099730 advisory. In the Linux kernel, the following vulnerability has been resolved: net: atm: fix crash due to unvalidated vcc pointer in sigdsend Reproducer available at 1. The AT...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-101324)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101324 advisory. This issue was addressed through improved state management. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099776)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099776 advisory. In the Linux kernel, the following vulnerability has been resolved: dm snapshot: fix lockup in dmexceptiontableexit There was reported lockup when we exit a snapshot...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100538)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100538 advisory. In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in binderthreadrelease When a thread exits, binderthreadrelease walks its...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101165)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101165 advisory. Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6. Tenable ha...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099519)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099519 advisory. Uncontrolled recursion in PostgreSQL SSL and GSS negotiation allows an attacker able to connect to a PostgreSQL AFUNIX socket to achieve sustained denial of service...

RHEL 10 : gstreamer1-plugins-bad-free (RHSA-2026:55433)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:55433 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100364)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100364 advisory. In the Linux kernel, the following vulnerability has been resolved: iavf: Fix use-after-free in freenetdev We do netifnapiadd for all allocated qvectors, but...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101139)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101139 advisory. Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100378)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100378 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: usbtmc: Flush anchored URBs in usbtmcrelease When calling usbtmcrelease, pending anchored UR...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099748)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099748 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftexthdr: fix register tracking for FPRESENT flag nftexthdrinit passes user-controlle...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: samba (UTSA-2026-100777)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100777 advisory. Unity Link Advisory UTSA-2026-100777 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101137)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101137 advisory. Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbir...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099718)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099718 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: harden POSIX SID length parsing posixinfosidsize reads sid1 to obtain the subauthori...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100337)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100337 advisory. In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Check for NOTREADY flag state after locking Currently the check for NOTREADY flag is...

Unity Linux 20.1070e Security Update: varnish (UTSA-2026-099468)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099468 advisory. Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in certain unchecked req.url scenarios, mishandle URLs with a path of / for HTTP/1.1, potentially...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099720)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099720 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: fix hdrlen overflow in ipv6rplsrhdecompress ipv6rplsrhdecompress computes:...

Unity Linux 20.1070e Security Update: gvfs (UTSA-2026-099541)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099541 advisory. A flaw was found in the FTP GVfs backend. A remote attacker could exploit this input validation vulnerability by supplying specially crafted file paths containing...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099449)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099449 advisory. PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099770)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099770 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Carry over frag counter The gmacrx NAPI poll function assembles packets i...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101120)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101120 advisory. Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. Tenable has extract...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100888)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100888 advisory. Improper Validation of Unsafe Equivalence in punycode by the idna crate from Servo rust-url allows an attacker to create a punycode hostname that one part of a syste...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099732)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099732 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: convert inline data to extents when truncate exceeds inline size Add a check in ext4setattr...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099918)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099918 advisory. In the Linux kernel, the following vulnerability has been resolved: ixgbevf: fix use-after-free in VEPA multicast source pruning ixgbevfcleanrxirq prunes frames who...