Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-090049)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090049 advisory. HTTP/2 2.4.20 through 2.4.39 very early pushes, for example configured with H2PushResource, could lead to an overwrite of memory in the pushing request's pool, leadi...

Design/Logic Flaw

HTTP/2 2.4.20 through 2.4.39 very early pushes, for example configured with "H2PushResource", could lead to an overwrite of memory in the pushing request's pool, leading to crashes. The memory copied is that of the configured push link header values, not data supplied by the client...

CVE-2019-10081

HTTP/2 2.4.20 through 2.4.39 very early pushes, for example configured with "H2PushResource", could lead to an overwrite of memory in the pushing request's pool, leading to crashes. The memory copied is that of the configured push link header values, not data supplied by the client...

CVE-2019-10081

HTTP/2 2.4.20 through 2.4.39 very early pushes, for example configured with "H2PushResource", could lead to an overwrite of memory in the pushing request's pool, leading to crashes. The memory copied is that of the configured push link header values, not data supplied by the client...

CVE-2019-10081: Out-of-bounds Write

HTTP/2 2.4.20 through 2.4.39 very early pushes, for example configured with "H2PushResource", could lead to an overwrite of memory in the pushing request's pool, leading to crashes. The memory copied is that of the configured push link header values, not data supplied by the client...

PT-2019-3458

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.20 through 2.4.39 Description The issue is related to the implementation of the HTTP/2 protocol in the Apache HTTP Server, specifically with very early pushes, such as those configured with H2PushResource. This...