Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: curl (UTSA-2025-987462)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987462 advisory. When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the CURLOPTACCEPTENCODING option, using zlib 1.2.0.3 or older, a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: curl (UTSA-2025-987460)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987460 advisory. libcurl's ASN1 parser code has the GTime2str function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might...

EUVD-2023-31293

Malicious code in bioql PyPI...

EUVD-2025-17371

Malicious code in bioql PyPI...

EUVD-2023-32026

Malicious code in bioql PyPI...

EUVD-2023-32027

Malicious code in bioql PyPI...

EUVD-2025-1837

Malicious code in bioql PyPI...

EUVD-2024-47336

Malicious code in bioql PyPI...

EUVD-2024-47867

Malicious code in bioql PyPI...

EUVD-2023-31290

Malicious code in bioql PyPI...

EUVD-2023-31291

Malicious code in bioql PyPI...

EUVD-2024-48211

Malicious code in bioql PyPI...

EUVD-2023-54190

Malicious code in bioql PyPI...

EUVD-2024-27350

Malicious code in bioql PyPI...

EUVD-2024-27415

Malicious code in bioql PyPI...

EUVD-2025-1809

Malicious code in bioql PyPI...

EUVD-2024-3571

Malicious code in bioql PyPI...

EUVD-2019-15026

Malicious code in bioql PyPI...

EUVD-2025-16332

Malicious code in bioql PyPI...

curl: AWS SigV4 Signature Disclosure via Verbose Logging in libcurl

Summary When libcurl is built with AWS SigV4 support, enabling verbose logging CURLOPTVERBOSE or --verbose causes the library to print both the string-to-sign and the final HMAC signature into logs. Because signatures remain valid for several minutes and are derived directly from AWS credentials,...