Unity Linux 20.1070a Security Update: gstreamer1-plugins-base (UTSA-2025-984682)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984682 advisory. GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been detected in the formatchannelmask function in...

Unity Linux 20.1070a Security Update: firefox (UTSA-2025-987429)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987429 advisory. addBinding in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow. Tenable has extracted the preceding description block directly from the Unity...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986428)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986428 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: fix null deref in parse dev addr Fix a logic error that could result in a null...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986422)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986422 advisory. In the Linux kernel, the following vulnerability has been resolved: watchdog: sc520wdt: Fix possible use-after-free in wdtturnoff This module's remove path calls...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-397186)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-397186 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds write in triegetnextkey triegetnextkey allocates a node stack with size...

Unity Linux 20.1070a Security Update: firefox (UTSA-2025-987423)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987423 advisory. Insufficient escaping in the Copy as cURL feature could potentially be used to trick a user into executing unexpected code. This vulnerability affects Firefox 141,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986399)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986399 advisory. In the Linux kernel, the following vulnerability has been resolved: ethernet: hisilicon: hns: hnsdsafmisc: fix a possible array overflow in hnsdsafgesrstbyport The i...

Unity Linux 20.1070a Security Update: firefox (UTSA-2025-987445)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987445 advisory. Due to insufficient escaping of the newline character in the Copy as cURL feature, an attacker could trick a user into using this command, potentially leading to loc...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-395375)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-395375 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu: Return right value in iommusvabinddevice iommusvabinddevice should return either a sva bon...