Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: shim (UTSA-2023-001490)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001490 advisory. The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ruby (UTSA-2023-001257)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001257 advisory. A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: dnsmasq (UTSA-2026-091426)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-091426 advisory. A flaw was found in the default configuration of dnsmasq, as shipped with Fedora versions prior to 31 and in all versions Red Hat Enterprise Linux, where it listens ...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: jackson-databind (UTSA-2026-091417)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-091417 advisory. SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used because of...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libvpx (UTSA-2023-003032)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003032 advisory. VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding. Tenable has extracted the preceding description block directly from the Unity...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-054006)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054006 advisory. In Python aka CPython up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow attackers t...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git (UTSA-2023-000611)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000611 advisory. Git is a revision control system. Using a specially-crafted repository, Git prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: glibc (UTSA-2023-002881)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002881 advisory. A flaw was found in glibc. In an uncommon situation, the gaihinet function may use memory that has been freed, resulting in an application crash. This issue is only...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000581)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000581 advisory. Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440. Tenable has extracted the preceding description block directly from the Unity Linu...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: shadow (UTSA-2023-001594)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001594 advisory. In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn change finger. Although it is not possible to exploit this...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: jackson-databind (UTSA-2026-091354)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-091354 advisory. FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mdadm (UTSA-2023-002894)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002894 advisory. Buffer overflow in some IntelR SSD Tools software before version mdadm-4.2-rc2 may allow a privileged user to potentially enable escalation of privilege via local...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: php (UTSA-2023-002405)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002405 advisory. In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, passwordverify function may accept some invalid Blowfish hashes as valid. If such invalid has...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: emacs (UTSA-2022-000996)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000996 advisory. GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: firefox (UTSA-2023-001403)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001403 advisory. In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XMLExternalEntityParserCreate in out-of-memory situations...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wpa_supplicant (UTSA-2024-003818)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-003818 advisory. The implementation of PEAP in wpasupplicant through 2.10 allows authentication bypass. For a successful attack, wpasupplicant must be configured to not verify the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: busybox (UTSA-2023-002393)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002393 advisory. There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: bind (UTSA-2023-003035)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003035 advisory. The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only limited by the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kexec-tools (UTSA-2026-032932)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032932 advisory. A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local unprivileged user to read this file and leak kernel internal...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mdadm (UTSA-2023-002893)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002893 advisory. Uncontrolled resource consumption in some IntelR SSD Tools software before version mdadm-4.2-rc2 may allow a priviledged user to potentially enable denial of service...