Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: virglrenderer (UTSA-2026-061532)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-061532 advisory. An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer virglrenderer. This flaw allows a malicious guest to create a specially crafted virgil...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: unzip (UTSA-2025-002255)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002255 advisory. Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: log4j12 (UTSA-2026-093024)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093024 advisory. By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout. T...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: unzip (UTSA-2025-002281)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002281 advisory. A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: log4j12 (UTSA-2026-093019)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093019 advisory. JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: rsyslog (UTSA-2025-002269)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002269 advisory. Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is used. This c...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: apache-commons-compress (UTSA-2026-032266)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032266 advisory. When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very sma...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: p11-kit (UTSA-2026-032284)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032284 advisory. An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the p11-kit library and the...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: apache-commons-compress (UTSA-2026-032264)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032264 advisory. When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libtirpc (UTSA-2025-002260)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002260 advisory. In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This ca...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: unzip (UTSA-2025-002253)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002253 advisory. A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: luajit (UTSA-2025-002298)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002298 advisory. LuaJIT through 2.1.0-beta3 has an out-of-bounds read in ljerrrun in ljerr.c. Tenable has extracted the preceding description block directly from the Unity Linux...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: avalon-framework (UTSA-2026-093017)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093017 advisory. Apache Log4j2 versions 2.0-beta7 through 2.17.0 excluding security fix releases 2.3.2 and 2.12.4 are vulnerable to a remote code execution RCE attack when a...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: libass (UTSA-2025-002290)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002290 advisory. libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decodechars called from decodefont and processtext because the wrong integer data type is used for...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: rpm (UTSA-2026-093007)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093007 advisory. A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package or...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: libass (UTSA-2026-032348)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032348 advisory. In libass 0.14.0, the assoutlineconstruct's call to outlinestroke causes a signed integer overflow. Tenable has extracted the preceding description block directly fr...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: apache-commons-compress (UTSA-2026-032265)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032265 advisory. When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very sma...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: unzip (UTSA-2025-002282)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002282 advisory. A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: luajit (UTSA-2025-002299)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002299 advisory. LuaJit through 2.1.0-beta3 has an out-of-bounds read because gc handler frame traversal is mishandled. Tenable has extracted the preceding description block directly...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cpio (UTSA-2026-092971)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-092971 advisory. The cpiosafernamesuffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service out-of-bounds write via a crafted cpio file. Tenable has...