13116 matches found
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-cryptography (UTSA-2026-017476)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017476 advisory. In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an integer overflow a...
Unity Linux 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-017503)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017503 advisory. A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. An attacker having permission to creat...
Unity Linux 20.1070e Security Update: redis6 (UTSA-2026-017799)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017799 advisory. Redis is an open source, in-memory database that persists on disk. When using the Redis Lua Debugger, users can send malformed requests that cause the debuggers...
Unity Linux 20.1060e / 20.1070e Security Update: jackson-databind (UTSA-2026-017619)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017619 advisory. FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to...
Unity Linux 20.1060e / 20.1070e Security Update: openssl (UTSA-2026-017581)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017581 advisory. Calls to EVPCipherUpdate, EVPEncryptUpdate and EVPDecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum...
Unity Linux 20.1060e / 20.1070e Security Update: ruby (UTSA-2026-017532)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017532 advisory. An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. A malicious FTP server can use the PASV response to trick Net::FTP into...
Unity Linux 20.1060e / 20.1070e Security Update: ImageMagick (UTSA-2026-017551)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017551 advisory. The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory in routine WritePALMImage because it needs to be offset by 256. This can cause a...
Unity Linux 20.1060e / 20.1070e Security Update: audiofile (UTSA-2026-017497)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017497 advisory. Integer overflow in modules/MSADPCM.cpp in Audio File Library aka audiofile 0.3.6 allows remote attackers to cause a denial of service crash via a crafted file...
Unity Linux 20.1060e / 20.1070e Security Update: libgit2 (UTSA-2026-017582)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017582 advisory. An issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0. path.c mishandles equivalent filenames that exist because of NTFS Alternate Data Streams. Th...
Unity Linux 20.1070e Security Update: mysql (UTSA-2026-017765)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017765 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DDL. Supported versions that are affected are 5.6.49 and prior, 5.7.31 and prior and...
Unity Linux 20.1070e Security Update: mysql (UTSA-2026-017706)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017706 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.21 and prior. Easily exploitable...
Unity Linux 20.1060e / 20.1070e Security Update: ImageMagick (UTSA-2026-017515)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017515 advisory. In ParseMetaGeometry of MagickCore/geometry.c, image height and width calculations can lead to divide- by-zero conditions which also lead to undefined behavior. This...
Unity Linux 20.1070e Security Update: jetty (UTSA-2026-017755)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017755 advisory. In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame. Tenable ha...
Unity Linux 20.1070e Security Update: mysql (UTSA-2026-017451)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017451 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.26 and prior. Easily exploitable...
Unity Linux 20.1060e / 20.1070e Security Update: openldap (UTSA-2026-017555)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017555 advisory. An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service...
Unity Linux 20.1070e Security Update: mysql (UTSA-2026-017700)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017700 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.21 and prior. Difficult to exploit...
Unity Linux 20.1070e Security Update: mysql (UTSA-2026-017667)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017667 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DDL. Supported versions that are affected are 8.0.22 and prior. Easily exploitable...
Unity Linux 20.1060e / 20.1070e Security Update: fetchmail (UTSA-2026-017438)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017438 advisory. Fetchmail before 6.4.22 fails to enforce STARTTLS session encryption in some circumstances, such as a certain situation with IMAP and PREAUTH. Tenable has extracted...
Unity Linux 20.1060e / 20.1070e Security Update: openldap (UTSA-2026-017524)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017524 advisory. A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service...
Unity Linux 20.1060e / 20.1070e Security Update: audiofile (UTSA-2026-017498)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017498 advisory. Heap-based buffer overflow in the readValue function in FileHandle.cpp in audiofile aka libaudiofile and Audio File Library 0.3.6 allows remote attackers to have...