Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000534)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000534 advisory. Undefined Behavior for Input to API in GitHub repository vim/vim prior to 9.0.0100. Tenable has extracted the preceding description block directly from the Unity Lin...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000573)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000573 advisory. Buffer Over-read in function findnextquote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-pillow (UTSA-2026-090114)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090114 advisory. In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than CVE-2020-5311...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gnupg2 (UTSA-2026-054045)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054045 advisory. GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints e.g., use of GPGME ar...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: fontforge (UTSA-2026-090278)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090278 advisory. An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens. This flaw allows an...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: SDL2 (UTSA-2026-090688)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090688 advisory. There is a heap overflow problem in video/SDLpixels.c in SDL Simple DirectMedia Layer 2.x to 2.0.18 versions. By crafting a malicious .BMP file, an attacker can caus...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: hdf5 (UTSA-2026-054072)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054072 advisory. An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5Tcopy in H5T.c. Tenable has extracted the preceding...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000565)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000565 advisory. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. Tenable has extracted the preceding description block directly from the Unity Linux security...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cups (UTSA-2026-054024)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054024 advisory. A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libxml2 (UTSA-2025-002241)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002241 advisory. An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: dovecot (UTSA-2026-090084)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090084 advisory. In Dovecot before 2.3.11.3, sending a specially formatted NTLM request will crash the auth service because of an out-of-bounds read. Tenable has extracted the...

Unity Linux 20.1060e / 20.1070e Security Update: wpa_supplicant (UTSA-2021-001735)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2021-001735 advisory. The EAP-pwd implementation in hostapd EAP server before 2.8 and wpasupplicant EAP peer before 2.8 does not validate fragmentation reassembly state properly for a cas...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: qt5-qtbase (UTSA-2023-002307)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002307 advisory. An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. When a SVG file with an image inside it is rendered, a...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: httpd (UTSA-2023-000282)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000282 advisory. Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' vulnerability in modproxyajp of Apache HTTP Server allows an attacker to smuggle requests to th...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000557)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000557 advisory. Buffer Over-read in GitHub repository vim/vim prior to 8.2. Tenable has extracted the preceding description block directly from the Unity Linux security advisory. No...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-090052)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090052 advisory. In Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling could be made to read memory after being freed, during connection...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: nss (UTSA-2026-090161)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090161 advisory. When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used; which leaked partial information about the nonce used during...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: nghttp2 (UTSA-2023-002139)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002139 advisory. Envoy is a cloud-native high-performance edge/middle/service proxy. Envoys HTTP/2 codec may leak a header map and bookkeeping structures upon receiving RSTSTREAM...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000572)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000572 advisory. NULL Pointer Dereference in function vimregexecstring at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: LibRaw (UTSA-2026-090027)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090027 advisory. LibRaw::raw2image in librawcxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference. Tenable has extracted the preceding description block directly from the Unity Lin...