Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libevent (UTSA-2026-124532)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124532 advisory. Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has an incorrect integer conversion in eventtagging.c when evtagunmarshalheader...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124475)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124475 advisory. When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended. CrossOriginProtection then skips...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124484)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124484 advisory. Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libxml2 (UTSA-2026-123925)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-123925 advisory. Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124493)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124493 advisory. The filepath.Walk and filepath.WalkDir functions are documented as not following symbolic links, but both functions are susceptible to a TOCTOU time of check/time of...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libevent (UTSA-2026-124537)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124537 advisory. Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, the libevent evhttp parser in http.c inconsistently handles duplicate Transfer-Encoding...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124498)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124498 advisory. Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information. Tenable has extracted the preceding...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libevent (UTSA-2026-124534)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124534 advisory. Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has two HTTP parsing weaknesses in http.c. evhttpdecodeuriinternal decodes...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gnupg2 (UTSA-2026-090091)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090091 advisory. GnuPG 2.2.21 and 2.2.22 and Gpg4win 3.1.12 has an array overflow, leading to a crash or possibly unspecified other impact, when a victim imports an attacker's OpenPG...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: firefox (UTSA-2023-002130)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002130 advisory. buildmodel in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow. Tenable has extracted the preceding description block directly from the Unity...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002313)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002313 advisory. Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499. Tenable has extracted the preceding description block directly from the Unity Linu...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000579)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000579 advisory. Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563. Tenable has extracted the preceding description block directly from the Unit...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: shim (UTSA-2026-091452)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-091452 advisory. During key agreement in a TLS handshake using a DHE based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client ...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000530)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000530 advisory. Use After Free in GitHub repository vim/vim prior to 9.0.0246. Tenable has extracted the preceding description block directly from the Unity Linux security advisory...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000556)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000556 advisory. Buffer Over-read in function grabfilename in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software, memory modification...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: dnsmasq (UTSA-2026-090234)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090234 advisory. A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is enabled and before it validates the received D...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libtar (UTSA-2026-054041)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054041 advisory. The thread function doesnt free a variable t-thbuf.gnulonglink after allocating memory, which may cause a memory leak. Tenable has extracted the preceding descriptio...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: guava (UTSA-2023-002175)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002175 advisory. Use of Java's default temporary directory for file creation in FileBackedOutputStream in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002315)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002315 advisory. NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392. Tenable has extracted the preceding description block directly from the Unity Linux security...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ppp (UTSA-2023-000026)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000026 advisory. DISPUTED A vulnerability classified as problematic has been found in ppp. Affected is the function dumpppp of the file pppdump/pppdump.c of the component pppdump. Th...