Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: php (UTSA-2026-090433)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090433 advisory. In PHP versions 7.2.x below 7.2.9, 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while parsing EXIF data with exifreaddata function, it is possible for malicious data to...

Linux Distros Unpatched Vulnerability : CVE-2026-90775

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PostGIS addressstandardizer through 3.7.0 fails to validate the Weight parameter from caller-supplied rules tables before using it as an array index. Attackers...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: firefox (UTSA-2026-090424)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090424 advisory. The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be controlled by the website. If a user used the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ctags (UTSA-2023-002841)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002841 advisory. A flaw was found in Exuberant Ctags in the way it handles the -o option. This option specifies the tag filename. A crafted tag filename specified in the command line...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mdadm (UTSA-2023-002894)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002894 advisory. Buffer overflow in some IntelR SSD Tools software before version mdadm-4.2-rc2 may allow a privileged user to potentially enable escalation of privilege via local...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: httpd (UTSA-2023-003828)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003828 advisory. A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Server 2.4.52 and...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: glibc (UTSA-2023-000634)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000634 advisory. DISPUTED A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the function monstartup of the file gmon.c of...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gawk (UTSA-2023-002900)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002900 advisory. A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read sensitive information. Tenable ha...

Fedora 44 : mongo-c-driver (2026-8ed63cce6b)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-8ed63cce6b advisory. libmongoc 1.30.9 Fixes - Fix OCSP error handling. CVE-2026-84964 - Fix unsafe casts during JSON parsing. CVE-2026-84965 - Fix possible unsafe...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-090126)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090126 advisory. Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service. The attacker opens the HTTP/2 window ...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: dovecot (UTSA-2026-090124)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090124 advisory. In Dovecot before 2.3.10.1, remote unauthenticated attackers can crash the lmtp or submission process by sending mail with an empty localpart. Tenable has extracted...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000585)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000585 advisory. Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2. Tenable has extracted the preceding description block directly from the Unity Linux...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ntp (UTSA-2023-001601)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001601 advisory. mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a decimal point. An adversary may be able to attack a client ntpq process, but...

Linux Distros Unpatched Vulnerability : CVE-2026-90776

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nodemailer versions 9.1.0 through 10.0.4 contain a quadratic time complexity vulnerability in the addressparser component when parsing email addresses with RFC...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: SDL (UTSA-2023-003818)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003818 advisory. SDL Simple DirectMedia Layer through 2.0.12 has an Integer Overflow and resultant SDLmemcpy heap corruption in SDLBlitCopy in video/SDLblitcopy.c via a crafted .BMP...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kexec-tools (UTSA-2026-032932)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032932 advisory. A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local unprivileged user to read this file and leak kernel internal...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: php (UTSA-2023-002405)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002405 advisory. In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, passwordverify function may accept some invalid Blowfish hashes as valid. If such invalid has...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: emacs (UTSA-2022-000996)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000996 advisory. GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: jackson-databind (UTSA-2026-091354)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-091354 advisory. FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: firefox (UTSA-2023-001403)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001403 advisory. In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XMLExternalEntityParserCreate in out-of-memory situations...