Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libtar (UTSA-2026-054040)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054040 advisory. The thread function doesnt free a variable t-thbuf.gnulongname after allocating memory, which may cause a memory leak. Tenable has extracted the preceding descriptio...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: nasm (UTSA-2023-001258)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001258 advisory. NASM v2.16 was discovered to contain a heap buffer overflow in the component quoteforpmake asm/nasm.c:856 Tenable has extracted the preceding description block...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000564)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000564 advisory. Use After Free in GitHub repository vim/vim prior to 8.2. Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gnupg2 (UTSA-2026-090063)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090063 advisory. A flaw was found in the way certificate signatures could be forged using collisions found in the SHA-1 algorithm. An attacker could use this weakness to create forge...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002715)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002715 advisory. Use After Free in GitHub repository vim/vim prior to 9.0.1858. Tenable has extracted the preceding description block directly from the Unity Linux security advisory...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-tornado (UTSA-2023-002184)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002184 advisory. Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-pip (UTSA-2023-002333)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002333 advisory. Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow a remote attacker to cause...

Unity Linux 20.1070e Security Update: glibc (UTSA-2022-002148)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-002148 advisory. The deprecated compatibility function clntcreate in the sunrpc module of the GNU C Library aka glibc through 2.34 copies its hostname argument on the stack without...

Unity Linux 20.1070-8ae Security Update: bind (UTSA-2022-002009)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-002009 advisory. BIND 9.16.11 - 9.16.26, 9.17.0 - 9.18.0 and versions 9.16.11-S1 - 9.16.26-S1 of the BIND Supported Preview Edition. Specifically crafted TCP streams can cause...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-090113)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090113 advisory. In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because procpax lacks...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: poppler (UTSA-2023-002397)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002397 advisory. In Poppler 22.07.0, PDFDoc::savePageAs in PDFDoc.c callows attackers to cause a denial-of-service application crashes with SIGABRT by crafting a PDF file in which th...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002326)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002326 advisory. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0742. Tenable has extracted the preceding description block directly from the Unity Linux securi...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002316)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002316 advisory. Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378. Tenable has extracted the preceding description block directly from the Unity...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000537)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000537 advisory. Use After Free in GitHub repository vim/vim prior to 9.0.0046. Tenable has extracted the preceding description block directly from the Unity Linux security advisory...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: freeradius (UTSA-2026-090267)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090267 advisory. In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BNCTX instance to handle all handshakes. This mean multiple threads use the same BNCTX...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: firefox (UTSA-2026-090053)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090053 advisory. When processing a MAR update file, after the signature has been validated, an invalid name length could result in a heap overflow, leading to memory corruption and...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: shim (UTSA-2023-001492)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001492 advisory. Calls to EVPCipherUpdate, EVPEncryptUpdate and EVPDecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: librabbitmq (UTSA-2023-002168)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002168 advisory. An issue was discovered in the C AMQP client library aka rabbitmq-c through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line e.g., for...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: polkit (UTSA-2026-090653)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090653 advisory. There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor exhaustion. The highest threat from this...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-090460)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090460 advisory. In Apache HTTP Server 2.4.0 to 2.4.41, modproxyftp may use uninitialized memory when proxying to a malicious FTP server. Tenable has extracted the preceding...