Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kbd (UTSA-2026-130164)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130164 advisory. openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented kbrequest/init usage,...

Unity Linux 20.1070e Security Update: tomcat (UTSA-2026-130388)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130388 advisory. Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990. This issue affects Apache Tomcat: from 11.0.20 through 11.0.24, fr...

Unity Linux 20.1070e Security Update: firefox (UTSA-2026-130347)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130347 advisory. Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15,...

Unity Linux 20.1070e Security Update: golang (UTSA-2026-130392)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130392 advisory. Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a maliciou...

Unity Linux 20.1070e Security Update: tomcat (UTSA-2026-130361)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130361 advisory. Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made, a client makes a DIGEST...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: gvfs (UTSA-2026-130161)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130161 advisory. A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds...

Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-130376)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130376 advisory. ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the GetList method of PerlMagick. A crafted call to the GetLis...

Unity Linux 20.1070e Security Update: firefox (UTSA-2026-130382)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130382 advisory. Site isolation issue in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

Unity Linux 20.1070e Security Update: openvpn (UTSA-2026-130406)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130406 advisory. A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7alpha1 through 2.7.4 allows remote authenticated peers to potentially cause a denial of service or leak memor...

Unity Linux 20.1070e Security Update: tomcat (UTSA-2026-130386)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130386 advisory. Uncontrolled Resource Consumption vulnerability in Apache Tomcatvia an allocation leak in the HTTP/2 backlog tracking when a stream is reset This issue affects Apach...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: tftp (UTSA-2026-130162)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130162 advisory. A flaw was found in tftp-hpa. When the in.tftpd remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: freerdp (UTSA-2026-130070)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130070 advisory. FreeRDP versions before 3.31.0 contain a heap buffer overflow vulnerability in negosendnegotiationrequest that fails to validate the LBLOADBALANCEINFO field length...

Unity Linux 20.1070a Security Update: libssh (UTSA-2026-130149)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130149 advisory. A flaw was found in libssh. When ProxyCommand is used, an unchecked fork failure can be stored as process ID -1; during cleanup, signals may then be sent across the...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: freerdp (UTSA-2026-130068)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130068 advisory. FreeRDP versions before 3.31.0 contain an uninitialized heap memory disclosure vulnerability in the urbdrc USB redirection channel. A malicious RDP server can induce...

Unity Linux 20.1070a Security Update: libssh (UTSA-2026-130121)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130121 advisory. A flaw was found in libssh. A malicious SFTP server can send responses for unknown request IDs that libssh clients keep queued indefinitely, causing unbounded memory...

Unity Linux 20.1070a Security Update: libssh (UTSA-2026-130108)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130108 advisory. A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject shell metacharacters, exposing environment variables and...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: freerdp (UTSA-2026-130067)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130067 advisory. FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in the URBDRC channel's funcgetepdesc function that indexes interface arrays by position instead o...

Unity Linux 20.1070a Security Update: libssh (UTSA-2026-130144)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130144 advisory. A flaw was found in libssh. A remote authenticated client can issue SSHFXPREAD requests with an arbitrarily large length, causing a libssh SFTP server to allocate...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: rsync (UTSA-2026-130076)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130076 advisory. rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessible to the rsync daemon process by exploiting symlink...

Unity Linux 20.1070a Security Update: grafana (UTSA-2026-130154)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130154 advisory. Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. Tenable has extracted the preceding description block...