Unity Linux 20.1070e Security Update: jython (UTSA-2025-984795)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984795 advisory. The html.parser.HTMLParser class had worse-case quadratic complexity when processing certain crafted malformed inputs potentially leading to amplified...

Unity Linux 20.1070e Security Update: glibc (UTSA-2025-680658)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680658 advisory. In librt in the GNU C Library aka glibc through 2.34, sysdeps/unix/sysv/linux/mqnotify.c mishandles certain NOTIFYREMOVED data, leading to a NULL pointer dereference...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987298)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987298 advisory. In the Linux kernel, the following vulnerability has been resolved: net: hsr: Fix potential use-after-free The skb is delivered to netifrx which may free it, after...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-738528)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-738528 advisory. In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix sdma.h tx-numdescs off-by-one error Unfortunately the commit fd8958efe877 introduced...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414415)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414415 advisory. A race condition was found in the Linux kernel's IP framework for transforming packets XFRM subsystem when multiple calls to xfrmprobealgs occurred simultaneously...

Unity Linux 20.1070e Security Update: resource-agents (UTSA-2025-984791)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984791 advisory. Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-craft...

Unity Linux 20.1070e Security Update: libtiff (UTSA-2025-984803)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984803 advisory. A vulnerability was found in LibTIFF up to 4.7.0. It has been rated as critical. This issue affects the function setrow of the file tools/thumbnail.c. The manipulati...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986408)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986408 advisory. In the Linux kernel, the following vulnerability has been resolved: mac80211: fix use-after-free in CCMP/GCMP RX When PN checking is done in mac80211, for...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414408)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414408 advisory. A flaw use after free in the Linux kernel video4linux driver was found in the way user triggers em28xxusbprobe for the Empia 28xx based TV cards. A local user could...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414610)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414610 advisory. kernel/bpf/verifier.c in the Linux kernel through 5.12.1 performs undesirable speculative loads, leading to disclosure of stack content via side-channel attacks, aka...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414516)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414516 advisory. In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/outputcore.c has an information leak because of certain use of a hash table which, although bi...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414440)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414440 advisory. It was discovered that the clsroute filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had t...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414465)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414465 advisory. Incomplete cleanup of multi-core shared buffers for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414449)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414449 advisory. Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can leverage the shared branch...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414599)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414599 advisory. fs/seqfile.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bound...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-382572)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-382572 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: bfa: Ensure the copied buf is NUL terminated Currently, we allocate a nbytes-sized kernel...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2025-984968)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984968 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easi...

Unity Linux 20.1070a Security Update: firefox (UTSA-2025-987446)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987446 advisory. 'Same-origin policy bypass in the Graphics: Canvas2D component.' This vulnerability affects Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14, Firefox ESR 140.2,...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: php-pear (UTSA-2025-003054)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-003054 advisory. ArchiveTar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked. Tenable has extracted the preceding description block...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986802)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986802 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/i915: fix a possible refcount leak in inteldpaddmstconnector If drmconnectorinit fails,...