Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-054053)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054053 advisory. A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using inttext, a system could take 50ms to parse an int string...

ROS-20260922-73-0120

The vulnerability in Tomcat11 is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2026-88339

A NULL pointer dereference vulnerability exists in the gfsgvrmlfieldclone function of GPAC 2d7da22e 26.08-DEV. The vulnerability occurs when cloning a PROTO default SFImage field with a NULL source pointer. An attacker can provide a specially crafted input file that triggers the condition,...

CVE-2026-88341

A reachable assertion vulnerability exists in YARA 4.5.8 when loading crafted .yrc compiled rule files. An attacker can provide a malicious file with an invalid arena configuration numbuffers=0 that triggers an assertion failure in yrarenagetptr, causing the application to terminate...

ROS-20260922-73-0116

The vulnerability in HProxy is related to errors in processing parameter values related to input data length. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260922-73-0129

The vulnerability in haproxy2 is related to errors in processing parameter values related to input data length. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260922-73-0125

The vulnerability in golang-x-crypto is related to the lack of integrity checking for messages. Exploiting this vulnerability allows a remote attacker to cause a service failure by sending specially crafted TCP segments...

ROS-20260922-73-0117

The vulnerability in haproxy2 is related to errors in processing parameter values related to input data length. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2026-88341

A reachable assertion vulnerability exists in YARA 4.5.8 when loading crafted .yrc compiled rule files. An attacker can provide a malicious file with an invalid arena configuration numbuffers=0 that triggers an assertion failure in yrarenagetptr, causing the application to terminate...

CVE-2026-88341

A reachable assertion vulnerability exists in YARA 4.5.8 when loading specially crafted .yrc compiled rule files . An attacker can provide a malicious file containing an invalid arena configuration (specifically num_buffers=0), which triggers an assertion failure in the yr_arena_get_ptr() functio...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: binutils (UTSA-2023-002355)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002355 advisory. An issue was discovered function parsestabstructfields in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000531)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000531 advisory. NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240. Tenable has extracted the preceding description block directly from the Unity Linux security...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: php (UTSA-2026-090061)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090061 advisory. In PHP versions 7.2.x below 7.2.31, 7.3.x below 7.3.18 and 7.4.x below 7.4.6, when HTTP file uploads are allowed, supplying overly long filenames or field names coul...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libvirt (UTSA-2026-054023)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054023 advisory. A flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method failed to acquire the driver-nwfilters mutex before iterating over...

SUSE SLES12 Security Update : google-guest-agent (SUSE-SU-2026:4272-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4272-1 advisory. - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header. -...

ROS-20260922-73-0130

The vulnerability in HProxy is related to errors in processing parameter values related to input data length. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260922-73-0007

The vulnerability in gstreamer1-plugins-good is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20260922-73-0014

The vulnerability in gstreamer1-plugins-bad-free is related to the implementation of incorrect control flow management. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20260922-73-0098

The vulnerability of the xdpmasterredirect function in the net/core/filter.c module, which supports networking functions in Linux kernels, is related to pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

ROS-20260922-73-0094

The vulnerability of the neighxmit function in the net/core/neighbour.c module, which is part of Linux’s kernel-based networking functions, involves a flaw where resources are not released after their useful life has ended. Exploiting this vulnerability allows an attacker to cause service failure...