Unity Linux 20.1050e Security Update: kernel (UTSA-2025-991279)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991279 advisory. In the Linux kernel, the following vulnerability has been resolved: net: If sock is dead don't access sock's skwq in skstreamwaitmemory Fixes the below NULL pointer...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: expat (UTSA-2025-991275)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991275 advisory. expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XMLSetEntityDeclHandler function, which allows remote...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-991282)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991282 advisory. In the Linux kernel, the following vulnerability has been resolved: posix-clock: Fix missing timespec64 check in pcclocksettime As Andrew pointed out, it will make...

Unity Linux 20.1050e / 20.1070e Security Update: libssh (UTSA-2025-991268)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991268 advisory. A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw can be triggered i...

Unity Linux 20.1070e Security Update: coreutils (UTSA-2025-991267)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991267 advisory. A flaw was found in GNU Coreutils. The sort utility's begfield function is vulnerable to a heap buffer under-read. The program may access memory outside the allocate...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: efl (UTSA-2025-991240)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991240 advisory. efl Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not tested for this issue but has...

Unity Linux 20.1060e / 20.1070e Security Update: dde-daemon (UTSA-2025-991247)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991247 advisory. dde-daemonDBus Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not tested for this issue...

Unity Linux 20.1070a Security Update: deepin-compressor (UTSA-2025-991249)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991249 advisory. deepin-compressor Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not tested for this iss...

Unity Linux 20.1050e / 20.1070e Security Update: libxslt (UTSA-2025-991266)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991266 advisory. A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash. Tenable has...

Unity Linux 20.1060a / 20.1070a Security Update: dde-daemon (UTSA-2025-991248)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991248 advisory. dde-daemonDBus Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not tested for this issue...

Unity Linux 20.1070e Security Update: apache-commons-lang3 (UTSA-2025-991256)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991256 advisory. Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang: Starting withcommons-lang:commons-lang2.0 to 2.6, and, from...

Unity Linux 20.1050e / 20.1070e Security Update: avahi (UTSA-2025-991257)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991257 advisory. A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are...

Unity Linux 20.1070e Security Update: deepin-compressor (UTSA-2025-991246)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991246 advisory. deepin-compressor Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not tested for this iss...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ruby (UTSA-2025-991241)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991241 advisory. Unity Link Advisory UTSA-2025-991241 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: aide (UTSA-2025-991233)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991233 advisory. AIDE is an advanced intrusion detection environment. Prior to version 0.19.2, there is an improper output neutralization vulnerability in AIDE. An attacker can craft...

Unity Linux 20.1060a / 20.1070a Security Update: abrt (UTSA-2025-991235)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991235 advisory. A flaw was found in the ABRT daemons handling of user-supplied mount information.ABRT copies up to 12 characters from an untrusted input and places them directly int...

Unity Linux 20.1060a / 20.1070a Security Update: bind (UTSA-2025-991236)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991236 advisory. Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: perl (UTSA-2025-991237)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991237 advisory. Perl threads have a working directory race condition where file operations may target unintended paths. If a directory handle is open at thread creation, the...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libvpx (UTSA-2025-991234)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991234 advisory. Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-991215)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991215 advisory. In the Linux kernel, the following vulnerability has been resolved: kyber: fix out of bounds access when preempted blkmqschedbiomerge gets the ctx and hctx for the...