Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: unbound (UTSA-2026-104816)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104816 advisory. In NLnet Labs Unbound 1.20.0 up to and including 1.25.1, when Unbound is configured with 'serve-expired: yes' and 'serve-expired-client-timeout discard-timeout 0'...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng12 (UTSA-2026-093172)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093172 advisory. Integer overflow in the pngsetunknownchunks function in libpng/pngset.c in libpng before 1.5.14beta08 allows context-dependent attackers to cause a denial of service...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mailman (UTSA-2026-093157)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093157 advisory. GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page. Tenable has extracted the preceding description block...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: hibernate-validator (UTSA-2026-093179)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093179 advisory. A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invalid EL expressions to be evaluated as if they...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: sqlite (UTSA-2026-104747)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104747 advisory. SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: datanucleus-core (UTSA-2026-093032)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093032 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: jgroups (UTSA-2026-031601)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-031601 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098972)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098972 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Enforce expectedattachtype for tailcall compatibility Yinhao et al. recently reported: Our...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng12 (UTSA-2026-093184)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093184 advisory. Buffer overflow in the pngsetPLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x before 1.4.18, 1.5.x before 1.5.25, and 1.6.x before...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098851)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098851 advisory. In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Fix handling of multiple calls to vhostscsisetendpoint If vhostscsisetendpoint is...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104577)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104577 advisory. In the Linux kernel, the following vulnerability has been resolved: orangefs: keep the readdir entry size 64-bit in fillfrompart fillfrompart computes the size of a...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098959)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098959 advisory. In the Linux kernel, the following vulnerability has been resolved: net: rose: convert 'use' field to refcountt The 'use' field in struct roseneigh is used as a...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104592)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104592 advisory. In the Linux kernel, the following vulnerability has been resolved: seg6: validate SRH length before reading fixed fields seg6validatesrh reads fixed SRH fields such...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098988)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098988 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6teui64: reject invalid MAC header for all packets eui64mt6 derives a modified EUI-6...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098684)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098684 advisory. In the Linux kernel, the following vulnerability has been resolved: netsched: hfsc: Fix a UAF vulnerability in class handling This patch fixes a Use-After-Free...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: obs-server (UTSA-2026-093621)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093621 advisory. A Improper Neutralization of Input During Web Page Generation vulnerability in open-build-service allows remote attackers to store arbitrary JS code to cause XSS. Th...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: file-roller (UTSA-2026-030639)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-030639 advisory. fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104566)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104566 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: xtu32: reject invalid shift counts u32matchit executes rule-supplied shift operands on...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098781)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098781 advisory. In the Linux kernel, the following vulnerability has been resolved: be2net: Fix NULL pointer dereference in becmdgetmacfromlist When the parameter pmacidvalid argume...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098877)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098877 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Bound VBIOS record-chain walk loops Why & How All record-chain walk loops in...