Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: php-pear (UTSA-2025-003054)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-003054 advisory. ArchiveTar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked. Tenable has extracted the preceding description block...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986453)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986453 advisory. In the Linux kernel, the following vulnerability has been resolved: ipw2x00: Fix potential NULL dereference in libipwxmit crypt and crypt-ops could be null, so we ne...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414327)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414327 advisory. In bindertransactionbufferrelease of binder.c, there is a possible use after free due to improper input validation. This could lead to local escalation of privilege...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986977)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986977 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: Fix use-after-free bug by not setting udc-dev.driver The syzbot fuzzer found a...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414445)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414445 advisory. An issue was discovered in drivers/usb/gadget/composite.c in the Linux kernel before 5.16.10. The USB Gadget subsystem lacks certain validation of interface OS...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2025-984968)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984968 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easi...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986847)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986847 advisory. In the Linux kernel, the following vulnerability has been resolved: ethernet: hisilicon: hns: hnsdsafmisc: fix a possible array overflow in hnsdsafgesrstbyport The i...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-018714)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-018714 advisory. A use-after-free flaw was found in qdiscgraft in net/sched/schapi.c in the Linux Kernel due to a race problem. This flaw leads to a denial of service issue. If patch...

Unity Linux 20.1070a Security Update: firefox (UTSA-2025-987446)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987446 advisory. 'Same-origin policy bypass in the Graphics: Canvas2D component.' This vulnerability affects Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14, Firefox ESR 140.2,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-738528)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-738528 advisory. In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix sdma.h tx-numdescs off-by-one error Unfortunately the commit fd8958efe877 introduced...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414514)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414514 advisory. nftablesnewset in net/netfilter/nftablesapi.c in the Linux kernel before 5.12.13 allows local users to cause a denial of service NULL pointer dereference and general...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414498)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414498 advisory. An out-of-bounds OOB memory write flaw was found in the Linux kernels watchqueue event notification subsystem. This flaw can overwrite parts of the kernel state,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-423850)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-423850 advisory. In the Linux kernel, the following vulnerability has been resolved: net: nfc: llcp: Add lock when modifying device list The device list needs its associated lock hel...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986549)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986549 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix use-after-free warning Fix the following use-after-free warning which is...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2025-936115)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-936115 advisory. Buffer Overflow vulnerability in FFmpeg 4.2 at convolutiony10bit in libavfilter/vfvmafmotion.c, which could let a remote malicious user cause a Denial of Service...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986305)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986305 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI: pciehp: Fix infinite loop in IRQ handler upon power fault The Power Fault Detected bit in th...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414534)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414534 advisory. An out of memory bounds write flaw 1 or 2 bytes of memory in the Linux kernel NFS subsystem was found in the way users use mirroring replication of files with NFS. A...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987347)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987347 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3: check return value after calling platformgetresource It will cause...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986317)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986317 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: fix null deref in parse dev addr Fix a logic error that could result in a null...

Unity Linux 20.1070e Security Update: squid (UTSA-2025-986641)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986641 advisory. Unity Link Advisory UTSA-2025-986641 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...