Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100884)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100884 advisory. Memory safety bugs present in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8. Some of these bugs showed evidence of memory corruption and we...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100098)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100098 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: avoid allocate block from corrupted group in ext4mbfindbygoal There's issue as follows:...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101112)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101112 advisory. Sandbox escape due to incorrect boundary conditions in the Telemetry component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9,...

RockyLinux 8 : libXfont2 (RLSA-2026:55446)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:55446 advisory. libxfont2: Font Server Client encoding Out-Of-Bounds Read/Write CVE-2026-59679 libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in...

Fortinet FortiClient Heap overflow in kernel driver due to missing size validation (FG-IR-26-156)

The version of FortiClient installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-156 advisory. - A buffer copy without checking size of input 'classic buffer overflow' vulnerability in Fortinet FortiClientWindows 7.4.0...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101299)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101299 advisory. Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 14...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-100892)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100892 advisory. The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.2, tvOS 18.2,...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101132)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101132 advisory. Denial-of-service in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and...

Debian dsa-6445 : ironic-api - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6445 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6445-1 [email protected] https://www.debian.org/securit...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101101)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101101 advisory. Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101354)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101354 advisory. Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.1...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100323)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100323 advisory. In the Linux kernel, the following vulnerability has been resolved: dm-verity: correctly handle dmbufioclientcreate failure If either of the calls to...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100390)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100390 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mvpp2main: fix possible OOB write in mvpp2ethtoolgetrxnfc rules is allocated in...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100516)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100516 advisory. In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check INITFAILED before nvmetrequninit in digest error path In nvmettcptryrecvddgst,...

Unity Linux 20.1070e Security Update: expat (UTSA-2026-099452)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099452 advisory. libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen. Tenable has extracted the preceding description blo...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099790)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099790 advisory. In the Linux kernel, the following vulnerability has been resolved: tee: optee: prevent use-after-free when the client exits before the supplicant Commit 70b0d6b0a19...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100917)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100917 advisory. Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. Tenable has...

Oracle Linux 10 : gstreamer1-plugins-ugly-free (ELSA-2026-55435)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-55435 advisory. 1.26.7-2.2 - Fix CVE-2026-19389: integer overflow vulnerabilities in asfdemux Resolves: RHEL-235515 Tenable has extracted the preceding description block...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099927)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099927 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: Make cakeenqueue return NETXMITCN when past bufferlimit The following setup can trigge...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101362)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101362 advisory. Uninitialized memory in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099755)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099755 advisory. In the Linux kernel, the following vulnerability has been resolved: bonding: alb: fix UAF in rlbarprecv during bond up/down The ALB RX path may access rxhashtbl...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100162)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100162 advisory. In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: require CAPNETADMIN to attach NGSM0710 ldisc Any unprivileged user can attach NGSM0710...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099759)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099759 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: input: hold netns during deferred transport reinjection Transport-mode reinjection stores a...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100745)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100745 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: never defer requests during idmap lookup During v4 request compound arg decoding, some ops...

RockyLinux 9 : libXfont2 (RLSA-2026:55447)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:55447 advisory. libxfont2: Font Server Client encoding Out-Of-Bounds Read/Write CVE-2026-59679 libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101113)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101113 advisory. Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101477)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101477 advisory. Denial-of-service in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. Tenable...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100158)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100158 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: renesasusbhs: Reorder clock handling and power management in probe Reorder the initializatio...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100551)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100551 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix SECINFONONAME decode error cleanup nfsd4decodesecinfononame currently initializes sinex...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100380)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100380 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: Avoid nfcthelperhash uses after free If nfconntrackinitstart fails for...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100762)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100762 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: dev: prevent integer overflow in I2CTIMEOUT ioctl While fuzzing with Syzkaller, a persistent...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-100974)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100974 advisory. A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS 15.8.7 an...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100533)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100533 advisory. In the Linux kernel, the following vulnerability has been resolved: cpufreq: pcc: fix use-after-free and double free in OSC evaluation pcccpufreqdoosc calls...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100366)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100366 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - Disallow concurrent writes in afalgsendmsg Issuing two writes to the same afalg...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099770)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099770 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Carry over frag counter The gmacrx NAPI poll function assembles packets i...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099535)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099535 advisory. Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099950)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099950 advisory. In the Linux kernel, the following vulnerability has been resolved: arm64: Add support for TSV110 Spectre-BHB mitigation The TSV110 processor is vulnerable to the...

openSUSE 16 Security Update : chromium (openSUSE-SU-2026:21581-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21581-1 advisory. Changes in chromium: - Chromium 151.0.7922.137 boo1274759: CVE-2026-19556: Use after free in V8 CVE-2026-19557: Use after free in TabStrip...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099733)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099733 advisory. In the Linux kernel, the following vulnerability has been resolved: lib: cpurmap: Avoid use after free on rmap-obj array entries When calling irqsetaffinitynotifier...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099789)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099789 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush cache for PASID table before using it When writing the address of a freshly...

macOS 26.x < 26.6.2 Multiple Vulnerabilities (148281)

The remote host is running a version of macOS / Mac OS X that is 26.x prior to 26.6.2. It is, therefore, affected by multiple vulnerabilities: - An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing an...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100723)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100723 advisory. In the Linux kernel, the following vulnerability has been resolved: hvnetvsc: use kmaplocalpage in netvsccopytosendbuf netvsccopytosendbuf copies page buffer entrie...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099699)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099699 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: restrict implied bcc0 exemption to responses without data area smb2checkmessage has ...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100370)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100370 advisory. In the Linux kernel, the following vulnerability has been resolved: seg6: separate dstcache for input and output paths in seg6 lwtunnel The seg6 lwtunnel uses a sing...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100111)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100111 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Resolve soft lockup issue when opening /dev/sgX The parameter defreservedsize defines t...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099696)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099696 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and IOCTLs The QAT driver exposes a character device...

MiracleLinux 8 : thunderbird-140.13.0-1.el8_10.ML.1 (AXSA:2026-1547:18)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1547:18 advisory. firefox: thunderbird: Site isolation issue in the DOM: Navigation component CVE-2026-15719 firefox: thunderbird: Invalid pointer in the JavaScript:...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100580)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100580 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Bound iscsiencodetextoutput appends to rspbuf iscsiencodetextoutput...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100904)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100904 advisory. Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101355)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101355 advisory. A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures. This vulnerability was...