Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cifs-utils (UTSA-2026-054012)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054012 advisory. cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = equal sign characters but is not a valid credentials file. Tenabl...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git (UTSA-2026-090128)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090128 advisory. Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker. This bug is similar to...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: glibc (UTSA-2023-003034)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003034 advisory. A flaw was found in the GNU C Library. A recent fix for CVE-2023-4806 introduced the potential for a memory leak, which may result in an application crash. Tenable h...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: xorg-x11-server (UTSA-2022-000902)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000902 advisory. A vulnerability, which was classified as problematic, has been found in X.org Server. Affected by this issue is the function ProcXkbGetKbdByName of the file xkb/xkb....

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: nss (UTSA-2026-090158)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090158 advisory. When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side channel...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: shadow (UTSA-2023-001594)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001594 advisory. In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn change finger. Although it is not possible to exploit this...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wpa_supplicant (UTSA-2024-003818)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-003818 advisory. The implementation of PEAP in wpasupplicant through 2.10 allows authentication bypass. For a successful attack, wpasupplicant must be configured to not verify the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: poppler (UTSA-2023-002399)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002399 advisory. Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0.89.0 allows remote attackers to cause a denial of service via crafted input. Tenable has extracted the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: php (UTSA-2023-002404)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002404 advisory. In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resource consumption and excessi...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: emacs (UTSA-2022-000996)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000996 advisory. GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cups (UTSA-2023-002838)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002838 advisory. Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflow and...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: brotli (UTSA-2026-090136)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090136 advisory. A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a one-shot decompression request to a script...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-099171)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099171 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid uninitialized value in BPFCOREREADBITFIELD Changes from V1: - Use a default branch in...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: bind (UTSA-2023-003035)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003035 advisory. The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only limited by the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: busybox (UTSA-2023-002393)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002393 advisory. There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: binutils (UTSA-2023-002658)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002658 advisory. GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfddwarf2findnearestlinewithalt at dwarf2.c. The...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libvpx (UTSA-2023-003032)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003032 advisory. VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding. Tenable has extracted the preceding description block directly from the Unity...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: poppler (UTSA-2023-003615)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003615 advisory. An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service DoS via crafted .pdf file to FoFiType1C::cvtGlyp...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libxml2 (UTSA-2023-001597)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001597 advisory. An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: firefox (UTSA-2023-001403)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001403 advisory. In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XMLExternalEntityParserCreate in out-of-memory situations...