Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: rubygem-activeresource (UTSA-2026-093008)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093008 advisory. There is a possible information disclosure issue in Active Resource v5.1.1 that could allow an attacker to create specially crafted requests to access data in an...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: rpm (UTSA-2026-093007)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093007 advisory. A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package or...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: avalon-logkit (UTSA-2026-093014)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093014 advisory. Apache Log4j2 versions 2.0-beta7 through 2.17.0 excluding security fix releases 2.3.2 and 2.12.4 are vulnerable to a remote code execution RCE attack when a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wildfly-elytron (UTSA-2026-031644)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-031644 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: datanucleus-api-jdo (UTSA-2026-093016)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093016 advisory. Apache Log4j2 versions 2.0-beta7 through 2.17.0 excluding security fix releases 2.3.2 and 2.12.4 are vulnerable to a remote code execution RCE attack when a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: iptables (UTSA-2026-092961)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-092961 advisory. A buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to at least crash the program or potentially gain code execution via a specially...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: lapack (UTSA-2026-032438)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032438 advisory. An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: rsyslog (UTSA-2025-002269)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002269 advisory. Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is used. This c...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: fribidi (UTSA-2025-002248)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002248 advisory. A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: avalon-framework (UTSA-2026-093017)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093017 advisory. Apache Log4j2 versions 2.0-beta7 through 2.17.0 excluding security fix releases 2.3.2 and 2.12.4 are vulnerable to a remote code execution RCE attack when a...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: apache-commons-compress (UTSA-2026-032264)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032264 advisory. When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: unzip (UTSA-2025-002281)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002281 advisory. A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: log4j12 (UTSA-2026-093019)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093019 advisory. JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: luajit (UTSA-2025-002298)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002298 advisory. LuaJIT through 2.1.0-beta3 has an out-of-bounds read in ljerrrun in ljerr.c. Tenable has extracted the preceding description block directly from the Unity Linux...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libtirpc (UTSA-2025-002260)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002260 advisory. In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This ca...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: unzip (UTSA-2025-002255)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002255 advisory. Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: log4j12 (UTSA-2026-093022)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093022 advisory. JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: virglrenderer (UTSA-2026-061532)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-061532 advisory. An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer virglrenderer. This flaw allows a malicious guest to create a specially crafted virgil...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wildfly-common (UTSA-2026-093013)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093013 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: log4j12 (UTSA-2026-093024)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093024 advisory. By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout. T...