Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: perl-DBI (UTSA-2026-126152)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-126152 advisory. DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse. preparse reserve...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: perl-DBI (UTSA-2026-126156)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-126156 advisory. DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment. The preparse method normalises SQL and removes...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: openssh (UTSA-2026-126163)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-126163 advisory. In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote- forwarding operations are concurrent. Tenable has extracted t...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: sudo (UTSA-2026-126151)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-126151 advisory. A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: perl-DBI (UTSA-2026-126157)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-126157 advisory. A flaw was found in DBI. This is a fix for a partial fix for CVE-2026-14380 for RHEL 9.8.z and 10.2.z. For a detailed Statement, Description and Mitigation please...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: openssh (UTSA-2026-126160)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-126160 advisory. sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when sftp server:/path . is used with an attacker-controlled server. Tenable...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: corosync (UTSA-2026-126161)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-126161 advisory. A heap-based buffer overflow was found in Corosync's Totem Process Group totempg message reassembly. When processing fragmented multicast messages, the buffer used t...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: unbound (UTSA-2026-123924)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-123924 advisory. In NLnet Labs Unbound 1.4.22 up to and including 1.25.1, UDP source port is randomized and intended to serve as a secret value that increases the entropy of DNS...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124469)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124469 advisory. When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misleading content...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124496)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124496 advisory. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124464)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124464 advisory. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain...

Unity Linux 20.1070a Security Update: coreutils (UTSA-2026-123926)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-123926 advisory. A flaw was found in GNU Coreutils. The sort utility's begfield function is vulnerable to a heap buffer under-read. The program may access memory outside the allocate...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124490)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124490 advisory. Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion. Tenable has extracted the preceding descriptio...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124483)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124483 advisory. The Reader.ReadResponse function constructs a response string through repeated string concatenation of lines. When the number of lines in a response is large, this c...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124491)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124491 advisory. When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124471)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124471 advisory. Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without additional command arguments, files...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: qemu (UTSA-2026-124428)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124428 advisory. Unity Link Advisory UTSA-2026-124428 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libkcapi (UTSA-2026-124528)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124528 advisory. Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kerne...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124474)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124474 advisory. The Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to ...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libevent (UTSA-2026-124532)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124532 advisory. Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has an incorrect integer conversion in eventtagging.c when evtagunmarshalheader...