12159 matches found
Unity Linux 20.1060e / 20.1070e Security Update: nodejs (UTSA-2026-017544)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017544 advisory. Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change...
Unity Linux 20.1070e Security Update: mysql (UTSA-2026-017724)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017724 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.21 and prior. Easily exploitable...
Unity Linux 20.1060e / 20.1070e Security Update: ImageMagick (UTSA-2026-017608)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017608 advisory. A flaw was found in ImageMagick in coders/bmp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form...
Unity Linux 20.1070e Security Update: hdf5 (UTSA-2026-017697)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017697 advisory. A heap-based buffer over-read in H5Oattrdecode in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service via a crafted HDF5...
Unity Linux 20.1060e / 20.1070e Security Update: transfig (UTSA-2026-017536)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017536 advisory. An issue was discovered in fig2dev before 3.2.8.. A NULL pointer dereference exists in the function computeclosedspline located in transspline.c. It allows an attack...
Unity Linux 20.1060e / 20.1070e Security Update: libxml2 (UTSA-2026-017425)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017425 advisory. A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing protection mechanisms and leading to denial of service. Tenable...
Unity Linux 20.1070e Security Update: mysql (UTSA-2026-017716)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017716 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.23 and prior. Easily exploitable...
Unity Linux 20.1070e Security Update: batik (UTSA-2026-017770)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017770 advisory. Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an...
Unity Linux 20.1060e / 20.1070e Security Update: ImageMagick (UTSA-2026-017551)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017551 advisory. The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory in routine WritePALMImage because it needs to be offset by 256. This can cause a...
Unity Linux 20.1060e / 20.1070e Security Update: audiofile (UTSA-2026-017497)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017497 advisory. Integer overflow in modules/MSADPCM.cpp in Audio File Library aka audiofile 0.3.6 allows remote attackers to cause a denial of service crash via a crafted file...
Unity Linux 20.1070e Security Update: mysql (UTSA-2026-017765)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017765 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DDL. Supported versions that are affected are 5.6.49 and prior, 5.7.31 and prior and...
Unity Linux 20.1070e Security Update: mysql (UTSA-2026-017761)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017761 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: X Plugin. Supported versions that are affected are 8.0.21 and prior. Easily exploitable...
Unity Linux 20.1060e / 20.1070e Security Update: rubygem-actionpack (UTSA-2026-017586)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017586 advisory. A possible information disclosure / unintended method execution vulnerability in Action Pack = 2.0.0 when using the redirectto or polymorphicurlhelper with untrusted...
Unity Linux 20.1060e / 20.1070e Security Update: rpm (UTSA-2026-017547)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017547 advisory. A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly...
Unity Linux 20.1070e Security Update: mysql (UTSA-2026-017744)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017744 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.19 and prior. Easily exploitable...
Unity Linux 20.1060e / 20.1070e Security Update: curl (UTSA-2026-017559)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017559 advisory. A user can tell curl = 7.20.0 and = 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server --ssl-reqd on the command line...
Unity Linux 20.1060e / 20.1070e Security Update: dnsmasq (UTSA-2026-017412)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017412 advisory. A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwardi...
Unity Linux 20.1060e / 20.1070e Security Update: jackson-databind (UTSA-2026-017619)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017619 advisory. FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to...
Unity Linux 20.1070e Security Update: redis6 (UTSA-2026-017799)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017799 advisory. Redis is an open source, in-memory database that persists on disk. When using the Redis Lua Debugger, users can send malformed requests that cause the debuggers...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: grub2 (UTSA-2026-017485)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017485 advisory. A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled. This flaw allows an...