Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: freerdp (UTSA-2026-109802)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109802 advisory. FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard cache request decoders that accept NULL NDR pointers for LookupName in...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: deepin-system-monitor (UTSA-2026-110876)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-110876 advisory. capdacreadsearchQt QTPLUGINPATHQTSTYLEOVERRIDE Qt DAC/etc/shadowSSHroot Tenable has extracted the preceding description block directly from the Unity Linux security...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109793)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109793 advisory. library/glob.html in the Python 2 and 3 documentation before 2016 has potentially misleading information about whether sorting occurs, as demonstrated by...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: microcode_ctl (UTSA-2026-110879)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-110879 advisory. Improper handling of values for some IntelR Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109804)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109804 advisory. Use-after-free UAF was possible in the lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile when a memory allocation fails with a MemoryError and the...

Unity Linux 20.1070-8ae / 20.1070e Security Update: qt5-qtbase (UTSA-2026-109808)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109808 advisory. An out-of-bounds read buffer over-read vulnerability exists in QTextCodec::codecForName in Qt. When the function is called with a QByteArray that is not NUL-terminat...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109831)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109831 advisory. unicodedata.normalize can take excessive CPU time when processing specially crafted Unicode input containing long runs of combining characters with alternating...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: deepin-system-monitor (UTSA-2026-109825)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109825 advisory. capdacreadsearchQt QTPLUGINPATHQTSTYLEOVERRIDE Qt DAC/etc/shadowSSHroot Tenable has extracted the preceding description block directly from the Unity Linux security...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109815)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109815 advisory. When using the configparser module to write configuration files containing multi-line text values with carriage return characters \r the resulting file could be...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109820)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109820 advisory. Mitgation ofCVE-2026-4519 was incomplete. If the URL contained %action the mitigation could be bypassed for certain browser types the webbrowser.open API could have...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109812)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109812 advisory. The import hook in CPython that handles legacy .pyc files SourcelessFileLoader is incorrectly handled in FileLoader a base class and so does not use io.opencode to...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109832)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109832 advisory. The ftpcp function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv was patched to replace server-supplied PASV host addresses with the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109829)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109829 advisory. http.cookies.Morsel.jsoutput returns an inline snippet and only escapes for JavaScript string context. It does not neutralize the HTML parser-sensitive sequence insi...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109830)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109830 advisory. When using the tarfile module with a file opened in streaming mode mode=r| the tarfile module did not properly handle EOF, meaning an archive could be parsed in an...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gvfs (UTSA-2026-109807)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109807 advisory. A flaw was found in the SFTP backend in gvfs. When mounting a share, a malicious SFTP server can cause readstring to allocate a buffer with a certain length but the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: UnionTech-rpm-installer (UTSA-2026-109806)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109806 advisory. RPMroot shellshell=TruePolkitallowactive=authselfkeep root Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Not...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gvfs (UTSA-2026-109822)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109822 advisory. A flaw was found in the MTP backend in gvfs. When reading a file from a mounted MTP device, doread in gvfsbackendmtp.c trusts the data length returned by the device...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109803)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109803 advisory. The email module, specifically the BytesGenerator class, didnt properly quote newlines for email headers when serializing an email message allowing for header...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: glib2 (UTSA-2026-109813)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109813 advisory. A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in xdgmimemagicparsemagicline in the xdgmimemagic.c file on little-endian systems when an...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109805)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109805 advisory. CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host. Tenable has extracted the preceding description block directly from the Unity Linux securi...