Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098972)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098972 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Enforce expectedattachtype for tailcall compatibility Yinhao et al. recently reported: Our...

Linux Distros Unpatched Vulnerability : CVE-2026-79218

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Sandbox in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: openssh (UTSA-2026-104818)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104818 advisory. internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have...

Linux Distros Unpatched Vulnerability : CVE-2026-79032

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098819)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098819 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/mbcache: cancel shrink work before destroying the cache mbcachedestroy calls shrinkerfree and...

Linux Distros Unpatched Vulnerability : CVE-2026-78912

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium securit...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-093276)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093276 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Encryption. Supported versions that are affected are 5.6.45 and prior and 5.7....

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098883)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098883 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: Replace guest-triggerable BUGON in ioeventfd datamatch with getunaligned Drop a BUGON that h...

Fedora 44 : libopenmpt (2026-a6d074ea9c)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-a6d074ea9c advisory. Security uppdate from 0.8.7 to 0.8.9 plus bug-fixes: https://lib.openmpt.org/libopenmpt/2026/08/19/security-updates-0.8.9-0.7.21-0.6.30-0.5.44-0.4.56/...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104569)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104569 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: check label build before nonewprivs test aachangeprofile builds a replacement label wit...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098925)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098925 advisory. In the Linux kernel, the following vulnerability has been resolved: udf: validate sparing table length as an entry count, not a byte count udfloadsparablemap accept...

Linux Distros Unpatched Vulnerability : CVE-2026-79141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromi...

Dotnetnuke < 10.3.3 Authorization bypass in image processor (GHSA-g8w5-h3rm-g8rj)

According to its self-reported version, the instance of Dotnetnuke running on the remote web server is prior to 10.3.3. It is, therefore, affected by a vulnerability. - An authorization vulnerability in the Image Processor could allow an unauthenticated user to access image files that were intend...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098775)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098775 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Add NULL check in mtinputconfigured devmkasprintf can return a NULL pointer on...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104559)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104559 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE...

Linux Distros Unpatched Vulnerability : CVE-2026-79176

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UI misrepresentation in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive informati...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104592)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104592 advisory. In the Linux kernel, the following vulnerability has been resolved: seg6: validate SRH length before reading fixed fields seg6validatesrh reads fixed SRH fields such...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: hivex (UTSA-2026-093175)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093175 advisory. A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivexopen function. An attacker could input a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng12 (UTSA-2026-093172)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093172 advisory. Integer overflow in the pngsetunknownchunks function in libpng/pngset.c in libpng before 1.5.14beta08 allows context-dependent attackers to cause a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2026-64779

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPad...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098990)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098990 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nflog: validate MAC header was set before dumping it The fallback path of dumpmacheade...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098960)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098960 advisory. In the Linux kernel, the following vulnerability has been resolved: bonding: fix type confusion in bondsetupbyslave kernel BUG at net/core/skbuff.c:2306! Oops: inval...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104604)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104604 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: addrconf: bail out of dadfailure when state is no longer POSTDAD addrconfdadfailure...

Linux Distros Unpatched Vulnerability : CVE-2026-78939

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary cod...

Linux Distros Unpatched Vulnerability : CVE-2026-74744

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipvlan: inherit neededheadroom and neededtailroom from phydev ipvlan devices inherit hardheaderlen from phydev during ipvlaninit, but leave neededheadroom and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098798)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098798 advisory. In the Linux kernel, the following vulnerability has been resolved: udf: fix partition descriptor append bookkeeping Mounting a crafted UDF image with repeated...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wireshark (UTSA-2026-104800)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104800 advisory. Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service Tenable has extracted the preceding description block...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mailman (UTSA-2026-093157)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093157 advisory. GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page. Tenable has extracted the preceding description block...

Linux Distros Unpatched Vulnerability : CVE-2026-73180

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient Session Expiration vulnerability in Apache Tomcat meant that if the session ID for an authenticated HTTP session was changed after a WebSocket...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-104766)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104766 advisory. Type confusion regarding input of PostgreSQL ctid data type selectivity estimator allows an object creator to view a calculation derived from the value of an arbitra...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098849)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098849 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: ignore xattrs past end Once inside 'ext4xattrinodedecrefall' we should ignore xattrs entrie...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: unbound (UTSA-2026-104816)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104816 advisory. In NLnet Labs Unbound 1.20.0 up to and including 1.25.1, when Unbound is configured with 'serve-expired: yes' and 'serve-expired-client-timeout discard-timeout 0'...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: freerdp (UTSA-2026-104830)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104830 advisory. FreeRDP before 3.29.0 contains integer overflow vulnerabilities in the audio input redirection channel audin across ALSA, sndio, WinMM, and OpenSL ES backends that...

Linux Distros Unpatched Vulnerability : CVE-2026-79249

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Code injection in Bisection in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted file. Chromium...

AlmaLinux 10 : gstreamer1-plugins-good (ALSA-2026:59972)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:59972 advisory. gstreamer: GStreamer: Remote Code Execution via Use-After-Free in rtpsbcdepay CVE-2026-18299 Tenable has extracted the preceding description block directly from...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-104757)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104757 advisory. SQL injection in PostgreSQL EXTRACT deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition. Attacks affect expression...

Linux Distros Unpatched Vulnerability : CVE-2026-79124

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Intents in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML pag...

Oracle Linux 10 : attr (ELSA-2026-59380)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-59380 advisory. 2.6.0-1 - rebase to 2.6.0 to fix the following CVEs: - CVE-2026-54371 - Symlink Traversal Privilege Escalation via getfattr RHEL-186128 Tenable has extracted...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-104778)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104778 advisory. Heap buffer overflow in PostgreSQL plperl return of a tied hash allows the function owner to execute arbitrary code as the operating system user running the database...

Linux Distros Unpatched Vulnerability : CVE-2026-79214

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098955)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098955 advisory. In the Linux kernel, the following vulnerability has been resolved: security/keys: fix missed RCU read section on lookup Nicholas Carlini reports that the keyring co...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098877)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098877 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Bound VBIOS record-chain walk loops Why & How All record-chain walk loops in...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098781)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098781 advisory. In the Linux kernel, the following vulnerability has been resolved: be2net: Fix NULL pointer dereference in becmdgetmacfromlist When the parameter pmacidvalid argume...

Fedora 44 : python-tablib (2026-eaa6ecd43e)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-eaa6ecd43e advisory. Resolves: https://nvd.nist.gov/vuln/detail/CVE-2026-9318 Tenable has extracted the preceding description block directly from the Fedora security advisory. No...

Linux Distros Unpatched Vulnerability : CVE-2026-80562

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gpio: ml-ioh: use rawspinlockt for the register lock iohirqtype is registered as the irqchip .irqsettype callback and takes chip-spinlock with spinlockirqsave...

Linux Distros Unpatched Vulnerability : CVE-2026-79226

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper privilege management in Regional Capabilities in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass...

Linux Distros Unpatched Vulnerability : CVE-2026-77658

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack-based buffer overflow vulnerability exists in the Dia diagram editor when processing Network Bus objects from Dia XML project files. In...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104551)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104551 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ip6gre: require CAPNETADMIN in the device netns for changelink ip6grechangelink and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098874)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098874 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: Prevent TOCTOU out-of-bounds write For the following path not holding the sock lock,...

Linux Distros Unpatched Vulnerability : CVE-2026-74735

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - l2tp: fix tunnel and session refcount leak on seqfile release In pppol2tpprocopen and l2tpdfsseqopen, iteration state pd-tunnel and pd-session is kept in seqfil...