Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: fribidi (UTSA-2025-002249)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002249 advisory. A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidicaprtltounicode function of the fribidi-char-sets-cap-rtl.c file. This flaw...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: grilo (UTSA-2026-031631)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-031631 advisory. In GNOME grilo though 0.3.13, grl-net-wc.c does not enable TLS certificate verification on the SoupSessionAsync objects it creates, leaving users vulnerable to netwo...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: velocity (UTSA-2024-005626)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-005626 advisory. An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account runnin...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mc (UTSA-2026-093026)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093026 advisory. An issue was discovered in Midnight Commander through 4.8.26. When establishing an SFTP connection, the fingerprint of the server is neither checked nor displayed. A...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: virglrenderer (UTSA-2026-061525)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-061525 advisory. A flaw was found in the VirGL virtual OpenGL renderer virglrenderer. The virgl did not properly initialize memory when allocating a host-backed memory resource. A...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: rubygem-activeresource (UTSA-2026-093008)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093008 advisory. There is a possible information disclosure issue in Active Resource v5.1.1 that could allow an attacker to create specially crafted requests to access data in an...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: log4j12 (UTSA-2026-093020)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093020 advisory. CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: p11-kit (UTSA-2026-032283)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032283 advisory. An issue was discovered in p11-kit 0.21.1 through 0.23.21. A heap-based buffer over-read has been discovered in the RPC protocol used by thep11-kit server/remote...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: jboss-logging (UTSA-2026-031578)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-031578 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: jboss-logging (UTSA-2026-031579)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-031579 advisory. Apache Log4j2 versions 2.0-alpha1 through 2.16.0 excluding 2.12.3 and 2.3.1 did not protect from uncontrolled recursion from self-referential lookups. This allows an...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wildfly-elytron (UTSA-2026-031644)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-031644 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: avalon-framework (UTSA-2026-093010)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093010 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: avalon-logkit (UTSA-2026-093012)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093012 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wildfly-common (UTSA-2026-093013)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093013 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: datanucleus-api-jdo (UTSA-2026-093015)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093015 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: wildfly-security-manager (UTSA-2026-031619)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-031619 advisory. Apache Log4j2 2.0-beta9 through 2.15.0 excluding security releases 2.12.2, 2.12.3, and 2.3.1 JNDI features used in configuration, log messages, and parameters do not...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: umoci (UTSA-2026-031608)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-031608 advisory. Open Container Initiative umoci before 0.4.7 allows attackers to overwrite arbitrary host paths via a crafted image that causes symlink traversal when umoci unpack o...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: virglrenderer (UTSA-2026-093021)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093021 advisory. A NULL pointer dereference in vrendrenderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service via commands that attempt to launch a grid...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wildfly-common (UTSA-2026-093018)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093018 advisory. Apache Log4j2 2.0-beta9 through 2.15.0 excluding security releases 2.12.2, 2.12.3, and 2.3.1 JNDI features used in configuration, log messages, and parameters do not...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: log4j12 (UTSA-2026-093022)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093022 advisory. JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the...