Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101477)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101477 advisory. Denial-of-service in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. Tenable...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099938)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099938 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: sti: use managed regmapfield allocations The regmapfield objects allocated at player init a...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099927)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099927 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: Make cakeenqueue return NETXMITCN when past bufferlimit The following setup can trigge...

Oracle Linux 10 : gstreamer1-plugins-ugly-free (ELSA-2026-55435)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-55435 advisory. 1.26.7-2.2 - Fix CVE-2026-19389: integer overflow vulnerabilities in asfdemux Resolves: RHEL-235515 Tenable has extracted the preceding description block...

Unity Linux 20.1070e Security Update: expat (UTSA-2026-099452)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099452 advisory. libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen. Tenable has extracted the preceding description blo...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099779)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099779 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject oversized group bitmap descriptors ocfs2validategdparent only bounds bgbits against...

RHEL 10 : libreswan (RHSA-2026:55449)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:55449 advisory. Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100158)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100158 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: renesasusbhs: Reorder clock handling and power management in probe Reorder the initializatio...

MiracleLinux 8 : thunderbird-140.13.0-1.el8_10.ML.1 (AXSA:2026-1547:18)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1547:18 advisory. firefox: thunderbird: Site isolation issue in the DOM: Navigation component CVE-2026-15719 firefox: thunderbird: Invalid pointer in the JavaScript:...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101359)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101359 advisory. Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099790)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099790 advisory. In the Linux kernel, the following vulnerability has been resolved: tee: optee: prevent use-after-free when the client exits before the supplicant Commit 70b0d6b0a19...

macOS 26.x < 26.6.2 Multiple Vulnerabilities (148281)

The remote host is running a version of macOS / Mac OS X that is 26.x prior to 26.6.2. It is, therefore, affected by multiple vulnerabilities: - An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing an...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100723)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100723 advisory. In the Linux kernel, the following vulnerability has been resolved: hvnetvsc: use kmaplocalpage in netvsccopytosendbuf netvsccopytosendbuf copies page buffer entrie...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100965)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100965 advisory. Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099773)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099773 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cryptmessage when using async crypto The CVE-2024-50047 fix...

openSUSE 16 Security Update : chromium (openSUSE-SU-2026:21581-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21581-1 advisory. Changes in chromium: - Chromium 151.0.7922.137 boo1274759: CVE-2026-19556: Use after free in V8 CVE-2026-19557: Use after free in TabStrip...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100144)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100144 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: espintcp: do not reuse an in-progress partial send espintcp keeps a single in-flight transm...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100555)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100555 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: fix uninit-value in sctprcvasconflookup sctprcvasconflookup in net/sctp/input.c only check...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100174)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100174 advisory. In the Linux kernel, the following vulnerability has been resolved: jffs2: check jffs2preallocrawnoderefs result in few other places Fuzzing hit another invalid...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100503)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100503 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix OOB read in drmparsetiledblock drmparsetiledblock casts the DisplayID block to a...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100338)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100338 advisory. In the Linux kernel, the following vulnerability has been resolved: iio: gyro: mpu3050: Fix irq resource leak The interrupt handler is setup but only a few lines dow...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101338)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101338 advisory. Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100096)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100096 advisory. In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix gssauth kref leak in gssallocmsg error path Commit 5940d1cf9f42 SUNRPC: Rebalance a...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099696)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099696 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and IOCTLs The QAT driver exposes a character device...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-100882)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100882 advisory. The issue was addressed with improved checks. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.2, tvOS 18.2, visionOS 2....

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100750)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100750 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix zero-size GDS range init on RDNA4 RDNA4 GFX 12 hardware removes the GDS, GWS, and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100370)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100370 advisory. In the Linux kernel, the following vulnerability has been resolved: seg6: separate dstcache for input and output paths in seg6 lwtunnel The seg6 lwtunnel uses a sing...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100571)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100571 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: use kvfree for replaced sysctl write buffer procsyscallhandler allocates its temporary sysct...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099535)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099535 advisory. Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101088)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101088 advisory. Integer overflow in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

FreeBSD : PostgreSQL -- Multiple vulnerabilities (05d311bc-9991-11f1-bc50-6cc21735f730)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 05d311bc-9991-11f1-bc50-6cc21735f730 advisory. The PostgreSQL project reports: CVE-2026-6464: psql COPY FROM STDIN, if the copy fails before...

Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-099490)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099490 advisory. ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 6.9.13-51 and 7.0.1-0 and above prior to 7.1.2-26...

Unity Linux 20.1070a Security Update: libreoffice (UTSA-2026-099544)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099544 advisory. LibreOffice Calc compiles cell formulas when opening a spreadsheet. A heap buffer overflow existed when compiling a very long formula made up of many opening tokens...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101277)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101277 advisory. Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. Tenabl...

Unity Linux 20.1070e Security Update: log4j (UTSA-2026-099511)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099511 advisory. Apache Log4j's JsonTemplateLayout https://logging.apache.org/log4j/2.x/manual/json-template-layout.html , in versions up to and including 2.25.3, produces invalid JS...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101156)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101156 advisory. Memory safety bugs present in Firefox ESR 140.5, Thunderbird ESR 140.5, Firefox 145 and Thunderbird 145. Some of these bugs showed evidence of memory corruption and ...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099764)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099764 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev: bitblit: bound-check glyph index in bitputcs bitputcsaligned/unaligned derived the glyph...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100298)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100298 advisory. In the Linux kernel, the following vulnerability has been resolved: misc: pciendpointtest: Free IRQs before removing the device In pciendpointtestremove, freeing the...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099917)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099917 advisory. In the Linux kernel, the following vulnerability has been resolved: nexthop: fix IPv6 route referencing IPv4 nexthop syzbot reported a panic 1 2. When an IPv6 nextho...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099929)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099929 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: fix slab-use-after-free Read in tipcaeaddecryptdone tipcaeaddecrypt goes straight from...

Oracle Linux 10 : bind (ELSA-2026-55437)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55437 advisory. - Validate NSEC3 signer matches owning zone CVE-2026-10723 - Reject out-of-zone NSEC next owner names CVE-2026-13321 - Fix reference-counted...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099770)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099770 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Carry over frag counter The gmacrx NAPI poll function assembles packets i...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101120)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101120 advisory. Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. Tenable has extract...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101137)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101137 advisory. Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbir...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099732)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099732 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: convert inline data to extents when truncate exceeds inline size Add a check in ext4setattr...

Unity Linux 20.1070e Security Update: varnish (UTSA-2026-099468)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099468 advisory. Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in certain unchecked req.url scenarios, mishandle URLs with a path of / for HTTP/1.1, potentially...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099776)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099776 advisory. In the Linux kernel, the following vulnerability has been resolved: dm snapshot: fix lockup in dmexceptiontableexit There was reported lockup when we exit a snapshot...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101165)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101165 advisory. Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6. Tenable ha...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101139)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101139 advisory. Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100586)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100586 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Make RX SKB per-port The SKB used to assemble packets from fragments in...