Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libevent (UTSA-2026-124531)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124531 advisory. Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has an off-by-one stack buffer overflow in evdns.c when dnsnametolabels formats ...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124492)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124492 advisory. During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: qemu (UTSA-2026-124431)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124431 advisory. Unity Link Advisory UTSA-2026-124431 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124495)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124495 advisory. Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124466)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124466 advisory. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124485)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124485 advisory. If the PATH environment variable contains paths which are executables rather than just directories, passing certain strings to LookPath , ., and .., can result in th...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124477)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124477 advisory. When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash. Tenable has extracted the preceding...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124465)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124465 advisory. url.Parse insufficiently validated the host/authority component and accepted some invalid URLs. Tenable has extracted the preceding description block directly from t...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124491)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124491 advisory. When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124496)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124496 advisory. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124490)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124490 advisory. Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion. Tenable has extracted the preceding descriptio...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124469)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124469 advisory. When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misleading content...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124494)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124494 advisory. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. Tenable has extracted the preceding description block...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124478)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124478 advisory. Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a maliciou...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124463)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124463 advisory. The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters in URLs is generally limited by the...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: gstreamer1-plugins-base (UTSA-2026-124535)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124535 advisory. A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header tha...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124464)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124464 advisory. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: unbound (UTSA-2026-123924)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-123924 advisory. In NLnet Labs Unbound 1.4.22 up to and including 1.25.1, UDP source port is randomized and intended to serve as a secret value that increases the entropy of DNS...

Unity Linux 20.1070a Security Update: coreutils (UTSA-2026-123926)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-123926 advisory. A flaw was found in GNU Coreutils. The sort utility's begfield function is vulnerable to a heap buffer under-read. The program may access memory outside the allocate...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124483)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124483 advisory. The Reader.ReadResponse function constructs a response string through repeated string concatenation of lines. When the number of lines in a response is large, this c...