Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131727)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131727 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix a couple integer overflows on 32bit systems On 32bit systems the off + sizeofstruct...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131776)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131776 advisory. In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Drop fpregs lock before inheriting FPU permissions Mike Galbraith reported the following...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131775)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131775 advisory. In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Ensure XFD state on signal delivery Sean reported 1 the following splat when running KVM...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131758)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131758 advisory. In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Keep xfdstate in sync with MSRIA32XFD Commit 672365477ae8 x86/fpu: Update XFD state wher...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131769)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131769 advisory. In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Clear XSTATEBVi in guest XSAVE state whenever XFDi=1 When loading guest XSAVE state via...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131744)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131744 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: strictly check for maximum number of actions The maximum number of flowtabl...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131722)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131722 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: avoid authenable sysctl UAF during netns teardown procsctpdoauth updates the SCTP control...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131757)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131757 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3-sva: Fix mm use-after-free We currently call arm64mmcontextput without holding ...

Unity Linux 20.1070e Security Update: golang (UTSA-2026-130379)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130379 advisory. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. This attack allows for a coordinating GOPROXY and...

Unity Linux 20.1070e Security Update: ffmpeg (UTSA-2026-130393)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130393 advisory. An integer overflow in the yuv2planeX8c function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a...

Unity Linux 20.1070e Security Update: tomcat (UTSA-2026-130403)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130403 advisory. Uncontrolled Resource Consumption vulnerability in Apache Tomcat's WebSocket chat example. This issue affects Apache Tomcat: from 11.0.0-M20 through 11.0.24, from...

Unity Linux 20.1070e Security Update: expat (UTSA-2026-130352)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130352 advisory. libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing ...

Unity Linux 20.1070e Security Update: glibc (UTSA-2026-130358)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130358 advisory. Converting crafted EUCJISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in...

Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-130377)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130377 advisory. ImageMagick before 7.1.2-30 and 6.9.13-55 contains a time-of-check-time-of-use TOCTOU vulnerability in the video decoder that allows attackers to bypass path policy...

Unity Linux 20.1070e Security Update: busybox (UTSA-2026-130404)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130404 advisory. A use-after-free in the awksub function editors/awk.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted AWK script. Tenabl...

Unity Linux 20.1070e Security Update: firefox (UTSA-2026-130355)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130355 advisory. Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2. Tenable...

Unity Linux 20.1070e Security Update: glibc (UTSA-2026-130364)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130364 advisory. Calling tdelete on a sufficiently deep tree in the GNU C Library version 2.1 to 2.44 may write one pointer past the end of an alloca-allocated array on the stack,...

Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-130357)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130357 advisory. ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the Layer method of PerlMagick. An attacker who supplies a...

Unity Linux 20.1070e Security Update: glibc (UTSA-2026-130371)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130371 advisory. Converting crafted SHIFTJISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result ...

Unity Linux 20.1070e Security Update: firefox (UTSA-2026-130368)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130368 advisory. Other issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2. Tenable has...