Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: dovecot (UTSA-2026-090088)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090088 advisory. In Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service because a length of zero is mishandled. Tenable has extracted the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: nasm (UTSA-2023-001258)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001258 advisory. NASM v2.16 was discovered to contain a heap buffer overflow in the component quoteforpmake asm/nasm.c:856 Tenable has extracted the preceding description block...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libxml2 (UTSA-2025-002240)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002240 advisory. An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XMLPARSEHUGE parser option enabled, several integer counters ca...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: firefox (UTSA-2026-090050)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090050 advisory. When recursing through graphical layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free. This occurs because the functi...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: emacs (UTSA-2023-000603)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000603 advisory. An issue was discovered in GNU Emacs through 28.2. htmlfontify.el has a command injection vulnerability. In the hfy-istext-command function, the parameter file and...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002320)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002320 advisory. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189. Tenable has extracted the preceding description block directly from the Unity Linux securi...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: shim (UTSA-2023-001491)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001491 advisory. ASN.1 strings are represented internally within OpenSSL as an ASN1STRING structure which contains a buffer holding the string data and a field holding the buffer...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ruby (UTSA-2026-090081)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090081 advisory. The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through 2.6.5, has an Unsafe Object Creation Vulnerability. This i...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000575)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000575 advisory. Use after free in utfptr2char in GitHub repository vim/vim prior to 8.2.4646. Tenable has extracted the preceding description block directly from the Unity Linux...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: haproxy (UTSA-2026-090137)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090137 advisory. In hpackdhtinsert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4, a remote attacker can write arbitrary bytes around a certain location ...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: busybox (UTSA-2026-091364)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-091364 advisory. Busybox contains a Missing SSL certificate validation vulnerability in The busybox wget applet that can result in arbitrary code execution. This attack appear to be...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git (UTSA-2026-054036)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054036 advisory. Git is a distributed revision control system. Git prior to versions 2.37.1, 2.36.2, 2.35.4, 2.34.4, 2.33.4, 2.32.3, 2.31.4, and 2.30.5, is vulnerable to privilege...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-054049)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054049 advisory. Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple / at the beginning of URI path which may...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libtar (UTSA-2026-054041)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054041 advisory. The thread function doesnt free a variable t-thbuf.gnulonglink after allocating memory, which may cause a memory leak. Tenable has extracted the preceding descriptio...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: jackson-databind (UTSA-2022-001272)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-001272 advisory. FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef ak...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-090042)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090042 advisory. A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handling could be made to access freed memory in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: jackson-databind (UTSA-2026-091415)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-091415 advisory. FasterXML jackson-databind 2.x before 2.9.9.1 might allow attackers to have a variety of impacts by leveraging failure to block the logback-core class from polymorph...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: binutils (UTSA-2023-002354)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002354 advisory. An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via function comparesymbols. Tenabl...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000543)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000543 advisory. Out-of-bounds Read in GitHub repository vim/vim prior to 9.0. Tenable has extracted the preceding description block directly from the Unity Linux security advisory...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: byacc (UTSA-2023-000152)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000152 advisory. RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been...