Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: bind (UTSA-2025-990956)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990956 advisory. Certain DNSSEC aspects of the DNS protocol in RFC 4033, 4034, 4035, 6840, and related RFCs allow remote attackers to cause a denial of service CPU consumption via on...

Unity Linux 20.1060a / 20.1070a Security Update: tigervnc (UTSA-2025-990942)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990942 advisory. A flaw was identified in the X.Org X servers X Keyboard Xkb extension where improper bounds checking in the XkbSetCompatMap function can cause an unsigned short...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libtiff (UTSA-2025-990943)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990943 advisory. A flaw was found in Libtiff. This vulnerability is a write-what-where condition, triggered when the library processes a specially crafted TIFF image file. By providi...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: bind (UTSA-2025-990955)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990955 advisory. Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libssh (UTSA-2025-990957)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990957 advisory. A flaw was found in libssh's handling of key exchange KEX processes when a client repeatedly sends incorrect KEX guesses. The library fails to free memory during the...

Unity Linux 20.1070a Security Update: expat (UTSA-2025-990945)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990945 advisory. libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing. Tenable has extracted...

Unity Linux 20.1060a / 20.1070a Security Update: tigervnc (UTSA-2025-990941)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990941 advisory. A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can lea...

Unity Linux 20.1060a / 20.1070a Security Update: tigervnc (UTSA-2025-990940)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990940 advisory. A flaw was discovered in the X.Org X servers X Keyboard Xkb extension when handling client resource cleanup. The software frees certain data structures without...

Malicious code in com.unity.xr.visionos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfc5fb97986cf3c32288632dc0df9916994609543b354548885edf9d229dd489 The package com.unity.xr.visionos was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190622 Malicious code in com.unity.xr.visionos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfc5fb97986cf3c32288632dc0df9916994609543b354548885edf9d229dd489 The package com.unity.xr.visionos was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198564

Malicious code in com.unity.xr.visionos npm...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: bind (UTSA-2025-990939)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990939 advisory. Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects...

Malicious Package

Overview com.unity.polyspatial.xr is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

EUVD-2025-198246

Malicious code in com.unity.polyspatial.xr npm...

Malicious code in com.unity.polyspatial.xr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f47a6bc79a20cf499736b6544281ecd6035fd1135b3d465ea2b7579061bfc2b The package com.unity.polyspatial.xr was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190581 Malicious code in com.unity.polyspatial.xr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f47a6bc79a20cf499736b6544281ecd6035fd1135b3d465ea2b7579061bfc2b The package com.unity.polyspatial.xr was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190500 Malicious code in com.mixpanel.unity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a617ed7539b6703818676ef051a6c12331b0e014026d1b56fb7d72775d7ad5a1 The package com.mixpanel.unity was found to contain malicious code. Source: ossf-package-analysis...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990916)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990916 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: don't skip expired elements during walk There is an asymmetry between...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libssh (UTSA-2025-990926)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990926 advisory. A flaw was found in libssh, a library that implements the SSH protocol. When calculating the session ID during the key exchange KEX process, an allocation failure in...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990923)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990923 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/swapfile: add condresched in getswappages The softlockup still occurs in getswappages under...