Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2022-000997)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000997 advisory. The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code o...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: qt5-qtbase (UTSA-2023-002403)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002403 advisory. In Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2, there can be an application crash in QXmlStreamReader via a crafted XML string that...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: poppler (UTSA-2023-003615)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003615 advisory. An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service DoS via crafted .pdf file to FoFiType1C::cvtGlyp...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libxml2 (UTSA-2023-001597)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001597 advisory. An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-099171)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099171 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid uninitialized value in BPFCOREREADBITFIELD Changes from V1: - Use a default branch in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: pixman (UTSA-2022-001002)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-001002 advisory. In libpixman in Pixman before 0.42.2, there is an out-of-bounds write aka heap-based buffer overflow in rasterizeedges8 due to an integer overflow in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: poppler (UTSA-2023-002396)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002396 advisory. An issue was discovered in Poppler 22.07.0. There is a reachable abort which leads to denial of service because the main function in pdfunite.cc lacks a stream check...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: httpd (UTSA-2023-003824)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003824 advisory. Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' vulnerability in modproxyajp of Apache HTTP Server allows an attacker to smuggle requests to th...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: nss (UTSA-2026-090217)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090217 advisory. In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting in a denial of service. Tenable has extracted t...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ntp (UTSA-2023-001599)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001599 advisory. mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a '\0' character. An adversary may be able to attack a client ntpq process, but...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpq (UTSA-2023-002898)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002898 advisory. IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct doll...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: strongswan (UTSA-2022-000878)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000878 advisory. strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity and intermediate CA certificate...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: glibc (UTSA-2023-003034)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003034 advisory. A flaw was found in the GNU C Library. A recent fix for CVE-2023-4806 introduced the potential for a memory leak, which may result in an application crash. Tenable h...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2023-003823)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003823 advisory. Apache HTTP Server 2.4.53 and earlier on Windows may read beyond bounds when configured to process requests with the modisapi module. Tenable has extracted the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: php (UTSA-2023-002402)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002402 advisory. In PHP versions 8.0. before 8.0.30, 8.1. before 8.1.22, and 8.2. before 8.2.8 various XML functions rely on libxml global state to track configuration variables, lik...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: emacs (UTSA-2023-000605)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000605 advisory. GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: httpd (UTSA-2023-003819)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003819 advisory. Apache HTTP Server 2.4.53 and earlier may not send the X-Forwarded- headers to the origin server based on client side Connection header hop-by-hop mechanism. This ma...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000378)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000378 advisory. Use After Free in GitHub repository vim/vim prior to 9.0.0490. Tenable has extracted the preceding description block directly from the Unity Linux security advisory...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107292)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107292 advisory. In the Linux kernel, the following vulnerability has been resolved: dm cache: fix flushing uninitialized delayedwork on cachectr error An unexpected WARNON from...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107274)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107274 advisory. In the Linux kernel, the following vulnerability has been resolved: 9p/net: fix improper handling of bogus negative read/write replies In p9clientwrite and...