14437 matches found
Unity Linux 20.1060e / 20.1070e Security Update: ImageMagick (UTSA-2026-017646)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017646 advisory. A flaw was found in ImageMagick in versions 7.0.11, where an integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c may trigger undefined behavior via a craft...
Unity Linux 20.1070e Security Update: hdf5 (UTSA-2026-017780)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017780 advisory. A SIGFPE signal is raised in the function H5Dchunksetinforeal of H5Dchunk.c in the HDF HDF5 1.10.3 library during an attempted parse of a crafted HDF file, because o...
Unity Linux 20.1060e / 20.1070e Security Update: mutt (UTSA-2026-017546)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017546 advisory. Mutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response. Tenable has extracted the preceding description block directly from t...
Unity Linux 20.1060e / 20.1070e Security Update: haproxy (UTSA-2026-017431)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017431 advisory. An integer overflow exists in HAProxy 2.0 through 2.5 in htxaddheader that can be exploited to perform an HTTP request smuggling attack, allowing an attacker to bypa...
Unity Linux 20.1070e Security Update: hdf5 (UTSA-2026-017777)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017777 advisory. Memory leak in the H5Odtypedecodehelper function in H5Odtype.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service memory consumptio...
Unity Linux 20.1070e Security Update: mysql (UTSA-2026-017694)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017694 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.23 and prior. Easily exploitable...
Unity Linux 20.1070e Security Update: mysql (UTSA-2026-017673)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017673 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.22 and prior. Easily exploitable...
Unity Linux 20.1060e / 20.1070e Security Update: ruby (UTSA-2026-017613)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017613 advisory. The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues. An incorrect document can ...
Unity Linux 20.1070e Security Update: transfig (UTSA-2026-017463)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017463 advisory. A denial of service vulnerabiity exists in fig2dev through 3.28a due to a segfault in the openstream function in readpics.c. Tenable has extracted the preceding...
Unity Linux 20.1070e Security Update: mysql (UTSA-2026-017455)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017455 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.26 and prior. Easily exploitable...
Unity Linux 20.1070e Security Update: mysql (UTSA-2026-017450)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017450 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Error Handling. Supported versions that are affected are 8.0.26 and prior. Easily...
Unity Linux 20.1070e Security Update: mysql (UTSA-2026-017715)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017715 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Encryption. Supported versions that are affected are 8.0.21 and prior. Easily...
Unity Linux 20.1070e Security Update: mysql (UTSA-2026-017736)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017736 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: PS. Supported versions that are affected are 8.0.21 and prior. Easily exploitable...
Unity Linux 20.1070e Security Update: mysql (UTSA-2026-017776)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017776 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: LDAP Auth. Supported versions that are affected are 5.7.31 and prior and 8.0.2...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-httplib2 (UTSA-2026-017469)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017469 advisory. httplib2 is a comprehensive HTTP client library for Python. In httplib2 before version 0.19.0, a malicious server which responds with long series of \xa0 characters ...
Unity Linux 20.1060e / 20.1070e Security Update: curl (UTSA-2026-017504)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017504 advisory. curl 7.1.1 to and including 7.75.0 is vulnerable to an Exposure of Private Personal Information to an Unauthorized Actor by leaking credentials in the HTTP Referer:...
Unity Linux 20.1070e Security Update: xstream (UTSA-2026-017781)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017781 advisory. XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has sufficien...
Unity Linux 20.1070e Security Update: microcode_ctl (UTSA-2026-017785)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017785 advisory. Hardware allows activation of test or debug logic at runtime for some IntelR processors which may allow an unauthenticated user to potentially enable escalation of...
Unity Linux 20.1060e / 20.1070e Security Update: ImageMagick (UTSA-2026-017557)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017557 advisory. A flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in t...
Unity Linux 20.1060e / 20.1070e Security Update: nss (UTSA-2026-017618)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017618 advisory. A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55. When using multi-part Chacha20, it could cause out-of-bounds reads. Thi...