Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100725)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100725 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: fix OOB read in compatmtwfromuser Luxiao Xu says: The function...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101306)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101306 advisory. Memory safety bugs present in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100366)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100366 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - Disallow concurrent writes in afalgsendmsg Issuing two writes to the same afalg...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100889)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100889 advisory. Uninitialized memory in the JavaScript Engine component. This vulnerability was fixed in Firefox 142, Firefox ESR 128.14, Firefox ESR 140.2, Thunderbird 142,...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100091)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100091 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntracksip: don't use simplestrtoul Replace unsafe port parsing in epaddrlen,...

RHEL 10 : curl (RHSA-2026:55450)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55450 advisory. The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-091345)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-091345 advisory. trackheader in libavformat/vividas.c in FFmpeg 4.3.1 has an out-of-bounds write because of incorrect extradata packing. Tenable has extracted the preceding descripti...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099709)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099709 advisory. In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: avoid double free of pool-stack on AQ init failure otx2poolaqinit frees pool-stack...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099916)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099916 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: fix uninit-value in sctprcvasconflookup sctprcvasconflookup in net/sctp/input.c only check...

Unity Linux 20.1070a Security Update: giflib (UTSA-2026-099552)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099552 advisory. Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100183)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100183 advisory. In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: keep RBUF EEE/PM disabled Setting RBUFEEEEN | RBUFPMEN in RBUFENERGYCTRL breaks th...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099990)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099990 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fsubset: Fix unbalanced refcnt in gethfree gethalloc increments the reference count,...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101149)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101149 advisory. Race condition in the Graphics component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100143)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100143 advisory. In the Linux kernel, the following vulnerability has been resolved: net: atlantic: fix fragment overflow handling in RX path The atlantic driver can receive packets...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100107)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100107 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix phys BO pread/pwrite with offset sgpage returns struct page pointer not void so...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099980)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099980 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: bound SRPRSP sense copy by the received length srpprocessrsp copies sense data from...

Unity Linux 20.1070e Security Update: patch (UTSA-2026-099445)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099445 advisory. GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file. Improper handling of consecutive end-of-file newli...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100132)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100132 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: diag: reject stale associations in dumpone path The SCTP exact sockdiag lookup can hold a...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-101175)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101175 advisory. The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1,...

RHEL 9 : kernel (RHSA-2026:54515)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:54515 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net/sched: actapi: use RCU with deferr...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099951)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099951 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: don't set EXT4GETBLOCKSCONVERT when splitting before submitting I/O When allocating blocks...

Unity Linux 20.1070e Security Update: GraphicsMagick (UTSA-2026-099451)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099451 advisory. GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c, related to an ImportViewPixelArea call. Tenable has extracted the...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100922)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100922 advisory. Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbi...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100578)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100578 advisory. In the Linux kernel, the following vulnerability has been resolved: ieee802154: 6lowpan: only accept IPv6 packets in lowpanxmit The aoe driver or similar generates a...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099726)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099726 advisory. In the Linux kernel, the following vulnerability has been resolved: dm log: fix out-of-bounds write due to regioncount overflow The local variable regioncount in...

Unity Linux 20.1070e Security Update: ntfs-3g (UTSA-2026-099503)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099503 advisory. Unity Link Advisory UTSA-2026-099503 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099954)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099954 advisory. In the Linux kernel, the following vulnerability has been resolved: dm: fix a buffer overflow in ioctl processing Tony Asleson using Claude found a buffer overflow ...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100514)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100514 advisory. In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before returning from fusereffolio fusereffolio unlocks the request but doe...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100190)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100190 advisory. In the Linux kernel, the following vulnerability has been resolved: tunnels: load network headers after skbcow in iptunnelpmtudbuildicmpv6 Sashiko found that...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101287)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101287 advisory. Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101481)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101481 advisory. Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: samba (UTSA-2026-100779)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100779 advisory. A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote,...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099905)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099905 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: reject short IPv4/IPv6 inputs in bpfprogtestrunskb bpfprogtestrunskb calls ethtypetrans firs...

RHEL 10 : nodejs22 (RHSA-2026:55541)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55541 advisory. Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101279)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101279 advisory. Memory safety bug present in Firefox ESR 128.9, and Thunderbird 128.9. This bug showed evidence of memory corruption and we presume that with enough effort this coul...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100097)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100097 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: restore combined single-frag length gate The ESP out-of-place fast path appends the...

MiracleLinux 9 : dotnet8.0-8.0.129-1.el9_8.ML.1 (AXSA:2026-1546:15)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1546:15 advisory. dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM CVE-2026-50651 dotnet: .NET Core: Denial of Service via type...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100700)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100700 advisory. In the Linux kernel, the following vulnerability has been resolved: net/rds: fix NULL deref in rdsibsendcqehandler on masked atomic completion rdsibxmitatomic always...

RHEL 9 : libXfont2 (RHSA-2026:55447)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55447 advisory. X.Org X11 libXfont2 runtime library Security Fixes: libxfont2: Font Server Client encoding Out-Of-Bounds Read/Write CVE-2026-59679...

Unity Linux 20.1070e Security Update: binutils (UTSA-2026-099477)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099477 advisory. A weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file ldmisc.c. Executing manipulation can lead to out-of-boun...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: redis (UTSA-2026-100781)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100781 advisory. Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK...

Unity Linux 20.1070e Security Update: elfutils (UTSA-2026-099528)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099528 advisory. A vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elfstrptr in the library /libelf/elfstrptr.c of th...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101353)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101353 advisory. Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. Tenable has extract...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100886)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100886 advisory. Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an embed tag. This could have bypassed websi...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099770)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099770 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Carry over frag counter The gmacrx NAPI poll function assembles packets i...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101303)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101303 advisory. Privilege escalation in the DOM: Notifications component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101120)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101120 advisory. Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. Tenable has extract...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101137)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101137 advisory. Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbir...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099732)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099732 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: convert inline data to extents when truncate exceeds inline size Add a check in ext4setattr...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099900)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099900 advisory. In the Linux kernel, the following vulnerability has been resolved: net: sched: clsapi: fix tcchainfillnode to initialize tcminfo to zero to prevent an info-leak Whe...