Unity Linux 20.1070e Security Update: libarchive (UTSA-2026-017751)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017751 advisory. An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a file outside of the...

Unity Linux 20.1050e / 20.1070e Security Update: iSulad (UTSA-2026-017406)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017406 advisory. Time-of-check Time-of-use TOCTOU Race Condition vulnerability in openEuler iSulad on Linux allows Leveraging Time-of-Check and Time-of-Use TOCTOU Race Conditions. Th...

Unity Linux 20.1060e / 20.1070e Security Update: krb5 (UTSA-2026-017424)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017424 advisory. The Key Distribution Center KDC in MIT Kerberos 5 aka krb5 before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/dotgsreq.c via a FAST inner...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-017756)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017756 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Roles. Supported versions that are affected are 8.0.21 and prior. Easily...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-017723)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017723 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Stored Procedure. Supported versions that are affected are 8.0.23 and prior. Easily...

Unity Linux 20.1060e / 20.1070e Security Update: openjpeg2 (UTSA-2026-017604)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017604 advisory. Integer Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service DoS. This occurs when the attacker uses the command...

Unity Linux 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-017500)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017500 advisory. A flaw was found in the psql interactive terminal of PostgreSQL in versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. If...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-pillow (UTSA-2026-017481)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017481 advisory. Pillow before 8.1.2 allows attackers to cause a denial of service memory consumption because the reported size of a contained image is not properly checked for a BLP...

Unity Linux 20.1060e / 20.1070e Security Update: libsndfile (UTSA-2026-017615)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017615 advisory. A heap buffer overflow vulnerability in msadpcmdecodeblock of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file. Tenable has...

Unity Linux 20.1070e Security Update: hdf5 (UTSA-2026-017782)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017782 advisory. A SIGFPE signal is raised in the function applyfilters of h5repackfilters.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file,...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-017724)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017724 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.21 and prior. Easily exploitable...

Unity Linux 20.1060e / 20.1070e Security Update: transfig (UTSA-2026-017536)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017536 advisory. An issue was discovered in fig2dev before 3.2.8.. A NULL pointer dereference exists in the function computeclosedspline located in transspline.c. It allows an attack...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: grub2 (UTSA-2026-017479)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017479 advisory. A flaw was found in grub2 in versions prior to 2.06. The rmmod implementation allows the unloading of a module used as a dependency without checking if any other...

Unity Linux 20.1060e / 20.1070e Security Update: bind (UTSA-2026-017660)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017660 advisory. In BIND 9.8.5 - 9.8.8, 9.9.3 - 9.11.29, 9.12.0 - 9.16.13, and versions BIND 9.9.3-S1 - 9.11.29-S1 and 9.16.8-S1 - 9.16.13-S1 of BIND 9 Supported Preview Edition, as...

Unity Linux 20.1060e / 20.1070e Security Update: ImageMagick (UTSA-2026-017523)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017523 advisory. A flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in t...

Unity Linux 20.1060e / 20.1070e Security Update: ImageMagick (UTSA-2026-017522)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017522 advisory. TIFFGetProfiles in /coders/tiff.c calls strstr which causes a large out-of-bounds read when it searches for dc:format=\image/dng\ within profile due to improper stri...

Unity Linux 20.1060e / 20.1070e Security Update: php (UTSA-2026-017496)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017496 advisory. In PHP versions 7.3.x below 7.3.26, 7.4.x below 7.4.14 and 8.0.0, when validating URL with functions like filtervar$url, FILTERVALIDATEURL, PHP will accept an URL wi...

Unity Linux 20.1060e / 20.1070e Security Update: curl (UTSA-2026-017589)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017589 advisory. When sending data to an MQTT server, libcurl = 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-017691)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017691 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: FTS. Supported versions that are affected are 5.7.31 and prior and 8.0.21 and prior...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-017786)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017786 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.22 and prior. Easily exploitable...