Unity Linux 20.1060a / 20.1070a Security Update: bind (UTSA-2026-130088)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130088 advisory. On a resolver configured to use dns64, if an applicable answer from the authoritative server is malformed in a specific way, the resolver named process will exit...

Unity Linux 20.1060a / 20.1070a Security Update: bind (UTSA-2026-130074)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130074 advisory. If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 bytes, then a flaw in named results in a negative cache entry of 0...

Unity Linux 20.1070a Security Update: grafana (UTSA-2026-130135)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130135 advisory. Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a maliciou...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: tomcat (UTSA-2026-130098)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130098 advisory. Session Fixation vulnerability in Apache Tomcat via rewrite valve. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41,...

Unity Linux 20.1070a Security Update: grafana (UTSA-2026-130155)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130155 advisory. Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion. Tenable has extracted the preceding descriptio...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: freerdp (UTSA-2026-130071)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130071 advisory. FreeRDP before 3.31.0 contains a buffer over-read vulnerability in the rtsreadresult function within the RPC gateway transport parser. Attackers can send a malicious...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: rsync (UTSA-2026-130131)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130131 advisory. rsyncbefore 3.5.0contains a path traversal vulnerability that allows a malicious sender to write files outside the intended destination directory tree by crafting...

Unity Linux 20.1070a Security Update: grafana (UTSA-2026-130116)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130116 advisory. Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures. Tenable has extracted the preceding description...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: rsync (UTSA-2026-130113)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130113 advisory. rsync before3.5.0 contains a time-of-check to time-of-use TOCTOU race condition vulnerability in the rrsync restricted shell wrapper that allows authenticated client...

Unity Linux 20.1070a Security Update: rsyslog (UTSA-2026-130089)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130089 advisory. A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libxml2 (UTSA-2026-130066)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130066 advisory. In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow. Tenable has extracted the preceding description block directly fro...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: rsync (UTSA-2026-130120)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130120 advisory. rsync before 3.5.0contains a path confinement bypass vulnerability that allows remote clients to escape the intended inner-module root confinement by constructing...

Unity Linux 20.1070a Security Update: libssh (UTSA-2026-130152)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130152 advisory. A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been...

Unity Linux 20.1070a Security Update: rsyslog (UTSA-2026-130143)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130143 advisory. A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cau...

Unity Linux 20.1070a Security Update: expat (UTSA-2026-130159)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130159 advisory. libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLGetBuffer, XMLParse, XMLParseBuffer, XMLParserFree, or XMLParserReset from within handlers in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: openssh (UTSA-2026-130046)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130046 advisory. In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote- forwarding operations are concurrent. Tenable has extracted t...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: openssh (UTSA-2026-130052)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130052 advisory. In sshd in OpenSSH before 10.5, the restrict keyword in authorizedkeys was supposed to be applicable to tunnel forwarding but was not. Tenable has extracted the...

Unity Linux 20.1070a Security Update: grafana-pcp (UTSA-2026-130112)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130112 advisory. Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a maliciou...

Unity Linux 20.1070a Security Update: grafana-pcp (UTSA-2026-130122)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130122 advisory. When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface...

Unity Linux 20.1070a Security Update: grafana (UTSA-2026-130146)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130146 advisory. Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations. Tenable has extracte...