Unity Linux 20.1050e / 20.1070e Security Update: wavpack (UTSA-2025-000294)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-000294 advisory. A null pointer dereference bug was found in wavpack-5.4.0 The results from the ASAN log: AddressSanitizer:DEADLYSIGNAL...

Important: gimp

Issue Overview: A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability in the FITS image loader by providing a specially crafted FITS file. This integer overflow leads to a zero-byte memory allocation, which is then subjected to a heap buffer overflow when...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101136)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101136 advisory. Use-after-free in the Widget: Cocoa component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. Tenable has...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101326)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101326 advisory. Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefo...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099758)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099758 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: csiostor: Fix dereference of null pointer rn The error exit path when rn is NULL ends up...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-091338)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-091338 advisory. libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the initvlc function, a similar issue to CVE-2013-0868. Tenable has extracted the preceding...

Unity Linux 20.1070e Security Update: expat (UTSA-2026-099515)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099515 advisory. xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used. Tenable has extracted the preceding description block...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099744)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099744 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix iloc.bh leak in ext4fcreplayinode error paths During code review, Joseph found that...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100589)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100589 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: Check for underflow in xfrmstatemtu Leo Lin reported OOB write issue in esp component:...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100129)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100129 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix use after free in debug code We're not allowed to dereference urb after calling...

Unity Linux 20.1070e Security Update: perl-Mojolicious (UTSA-2026-099533)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099533 advisory. Mojo::JSON versions before 9.47 for Perl allow memory exhaustion via unbounded recursion in the pure-Perl decoder. The pure-Perl decode path decodevalue dispatching ...

Unity Linux 20.1070e Security Update: edk2 (UTSA-2026-099522)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099522 advisory. Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL pointer...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100557)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100557 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: sockmap: fix tail fragment offset in bpfmsgpushdata When bpfmsgpushdata inserts data in the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-090701)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090701 advisory. A flaw was found in unrestricted eBPF usage by the BPFBTFLOAD, leading to a possible out-of-bounds memory write in the Linux kernels BPF subsystem due to the way a...

Unity Linux 20.1070e Security Update: bzip2 (UTSA-2026-099542)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099542 advisory. bzip2 contains an offbyone error in the bzip2recover utility. When processing a specially crafted file, the application performs an outofbounds write to a global...

Unity Linux 20.1070e Security Update: python-filelock (UTSA-2026-099470)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099470 advisory. filelock is a platform-independent file lock for Python. In versions prior to 3.20.1, a Time-of-Check- Time-of-Use TOCTOU race condition allows local attackers to...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099724)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099724 advisory. In the Linux kernel, the following vulnerability has been resolved: xfs: save ailp before dropping the AIL lock in push callbacks In xfsinodeitempush and...

UBUNTU-CVE-2026-72178

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: always put unsuccessfully committed target pids damoncommittarget puts and gets the destination and the source target pids. It puts the destination target pid because it will be overwritten by the source target pid...

Unity Linux 20.1070e Security Update: expat (UTSA-2026-099488)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099488 advisory. xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId. Tenable has extracted the preceding description block directly from the Unity Linux securi...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100758)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100758 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Fix UAF at sndtimeruserparams At releasing a timer object, e.g. when a userspace tim...