Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: freerdp (UTSA-2026-109802)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109802 advisory. FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard cache request decoders that accept NULL NDR pointers for LookupName in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109797)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109797 advisory. When an Expat parser with a registered ElementDeclHandler parses an inline document type definition containing a deeply nested content model a C stack overflow occur...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109804)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109804 advisory. Use-after-free UAF was possible in the lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile when a memory allocation fails with a MemoryError and the...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: microcode_ctl (UTSA-2026-110881)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-110881 advisory. Improper handling of overlap between protected memory ranges for some IntelR XeonR 6 processors when using IntelR TDX within SMM may allow an escalation of privilege...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: UnionTech-rpm-installer (UTSA-2026-110878)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-110878 advisory. RPMroot shellshell=TruePolkitallowactive=authselfkeep root Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Not...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: deepin-system-monitor (UTSA-2026-110876)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-110876 advisory. capdacreadsearchQt QTPLUGINPATHQTSTYLEOVERRIDE Qt DAC/etc/shadowSSHroot Tenable has extracted the preceding description block directly from the Unity Linux security...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: microcode_ctl (UTSA-2026-110879)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-110879 advisory. Improper handling of values for some IntelR Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109800)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109800 advisory. Element.findall and fully-consumed Element.iterfind exhibit On^2 time complexity when using XPath index predicates e.g. 1, last, last-N on XML documents with many...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109810)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109810 advisory. When folding a long comment in an email header containing exclusively unfoldable characters, the parenthesis would not be preserved. This could be used for injecting...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gvfs (UTSA-2026-109816)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109816 advisory. A flaw was found in the AFP backend in gvfs. When mounting a share, a malicious AFP server can cause the DSI read path to process a length that exceeds the size...

Unity Linux 20.1070-8ae / 20.1070e Security Update: sssd (UTSA-2026-109823)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109823 advisory. A flaw was found in SSSD. The extractauthtokv1 function in the PAM responder does not validate the authtokenlength field against the remaining buffer size before...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109814)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109814 advisory. bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, craft...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109830)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109830 advisory. When using the tarfile module with a file opened in streaming mode mode=r| the tarfile module did not properly handle EOF, meaning an archive could be parsed in an...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109803)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109803 advisory. The email module, specifically the BytesGenerator class, didnt properly quote newlines for email headers when serializing an email message allowing for header...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: glib2 (UTSA-2026-109813)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109813 advisory. A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in xdgmimemagicparsemagicline in the xdgmimemagic.c file on little-endian systems when an...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: UnionTech-rpm-installer (UTSA-2026-109806)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109806 advisory. RPMroot shellshell=TruePolkitallowactive=authselfkeep root Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Not...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gvfs (UTSA-2026-109822)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109822 advisory. A flaw was found in the MTP backend in gvfs. When reading a file from a mounted MTP device, doread in gvfsbackendmtp.c trusts the data length returned by the device...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: freerdp (UTSA-2026-109818)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109818 advisory. FreeRDP before 3.29.0 affected versions = 3.28.0 contains a heap out-of-bounds read in updateprocessglyphfragments/glyphcachefragmentput in libfreerdp/cache/glyph.c...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109831)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109831 advisory. unicodedata.normalize can take excessive CPU time when processing specially crafted Unicode input containing long runs of combining characters with alternating...

Unity Linux 20.1070-8ae / 20.1070e Security Update: qt5-qtbase (UTSA-2026-109808)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109808 advisory. An out-of-bounds read buffer over-read vulnerability exists in QTextCodec::codecForName in Qt. When the function is called with a QByteArray that is not NUL-terminat...