Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpq (UTSA-2023-002897)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002897 advisory. A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT. ...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gnutls (UTSA-2022-001364)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-001364 advisory. A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause undefined...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gnupg2 (UTSA-2026-090063)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090063 advisory. A flaw was found in the way certificate signatures could be forged using collisions found in the SHA-1 algorithm. An attacker could use this weakness to create forge...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002715)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002715 advisory. Use After Free in GitHub repository vim/vim prior to 9.0.1858. Tenable has extracted the preceding description block directly from the Unity Linux security advisory...

Unity Linux 20.1060e / 20.1070e Security Update: wpa_supplicant (UTSA-2021-001736)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2021-001736 advisory. The implementations of EAP-PWD in hostapd EAP Server and wpasupplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit. This vulnerability m...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-tornado (UTSA-2023-002184)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002184 advisory. Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: scipy (UTSA-2023-002142)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002142 advisory. A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in PyFindObjects function. Note: This is disputed as a bug and not...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000539)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000539 advisory. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0044. Tenable has extracted the preceding description block directly from the Unity Linux securi...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002721)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002721 advisory. Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846. Tenable has extracted the preceding description block directly from the Unity Linux...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: php (UTSA-2026-054028)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054028 advisory. In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdomysql extension with mysqlnd driver, if the third party is allowed to supply...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: yasm (UTSA-2023-002669)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002669 advisory. Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a crafted...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: bluez (UTSA-2023-001596)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001596 advisory. RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000575)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000575 advisory. Use after free in utfptr2char in GitHub repository vim/vim prior to 8.2.4646. Tenable has extracted the preceding description block directly from the Unity Linux...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000530)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000530 advisory. Use After Free in GitHub repository vim/vim prior to 9.0.0246. Tenable has extracted the preceding description block directly from the Unity Linux security advisory...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libtar (UTSA-2026-054042)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054042 advisory. An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc0 for a variable gnulongname, causing an...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000545)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000545 advisory. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0. Tenable has extracted the preceding description block directly from the Unity Linux security...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: protobuf-c (UTSA-2023-001305)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001305 advisory. protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember. Tenable has extracted the preceding description block directly from the Unity Linux...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: jackson-databind (UTSA-2026-091360)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-091360 advisory. A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9. When Default Typing is enabled either globally or for a specific property f...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ruby (UTSA-2023-002143)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002143 advisory. A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby. The URI parser mishandles invalid URLs that have specific characters. There is an increase ...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2023-002655)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002655 advisory. An issue was discovered in comparedigest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations were possible in the accumulator variable in...