Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109804)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109804 advisory. Use-after-free UAF was possible in the lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile when a memory allocation fails with a MemoryError and the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: freerdp (UTSA-2026-109817)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109817 advisory. FreeRDP before 3.29.0 contains out-of-bounds read vulnerabilities in the async update message proxy for the PolygonSC and PolygonCB primary drawing orders. When...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: UnionTech-rpm-installer (UTSA-2026-110878)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-110878 advisory. RPMroot shellshell=TruePolkitallowactive=authselfkeep root Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Not...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: glib2 (UTSA-2026-110880)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-110880 advisory. A denial-of-service and resource exhaustion vulnerability exists within the GDBus component of GLib. The gdbusauth authentication mechanism fails to enforce proper...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109820)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109820 advisory. Mitgation ofCVE-2026-4519 was incomplete. If the URL contained %action the mitigation could be bypassed for certain browser types the webbrowser.open API could have...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109814)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109814 advisory. bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, craft...

Unity Linux 20.1070-8ae / 20.1070e Security Update: qt5-qtbase (UTSA-2026-109808)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109808 advisory. An out-of-bounds read buffer over-read vulnerability exists in QTextCodec::codecForName in Qt. When the function is called with a QByteArray that is not NUL-terminat...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109812)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109812 advisory. The import hook in CPython that handles legacy .pyc files SourcelessFileLoader is incorrectly handled in FileLoader a base class and so does not use io.opencode to...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109810)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109810 advisory. When folding a long comment in an email header containing exclusively unfoldable characters, the parenthesis would not be preserved. This could be used for injecting...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109830)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109830 advisory. When using the tarfile module with a file opened in streaming mode mode=r| the tarfile module did not properly handle EOF, meaning an archive could be parsed in an...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109832)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109832 advisory. The ftpcp function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv was patched to replace server-supplied PASV host addresses with the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109819)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109819 advisory. The webbrowser.open API would accept leading dashes in the URL which could be handled as command line options for certain web browsers. New behavior rejects leading...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: freerdp (UTSA-2026-109818)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109818 advisory. FreeRDP before 3.29.0 affected versions = 3.28.0 contains a heap out-of-bounds read in updateprocessglyphfragments/glyphcachefragmentput in libfreerdp/cache/glyph.c...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109794)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109794 advisory. The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update, |= operator, and unpickling paths were not...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gvfs (UTSA-2026-109807)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109807 advisory. A flaw was found in the SFTP backend in gvfs. When mounting a share, a malicious SFTP server can cause readstring to allocate a buffer with a certain length but the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109805)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109805 advisory. CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host. Tenable has extracted the preceding description block directly from the Unity Linux securi...

Unity Linux 20.1070-8ae / 20.1070e Security Update: sssd (UTSA-2026-109823)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109823 advisory. A flaw was found in SSSD. The extractauthtokv1 function in the PAM responder does not validate the authtokenlength field against the remaining buffer size before...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gvfs (UTSA-2026-109816)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109816 advisory. A flaw was found in the AFP backend in gvfs. When mounting a share, a malicious AFP server can cause the DSI read path to process a length that exceeds the size...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: glib2 (UTSA-2026-109798)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109798 advisory. A denial-of-service and resource exhaustion vulnerability exists within the GDBus component of GLib. The gdbusauth authentication mechanism fails to enforce proper...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109821)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109821 advisory. pkgutil.getdata did not validate the resource argument as documented, allowing path traversals. Tenable has extracted the preceding description block directly from t...