Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cpio (UTSA-2026-092966)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-092966 advisory. cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive. Tenable has...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: rubygem-activeresource (UTSA-2026-093008)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093008 advisory. There is a possible information disclosure issue in Active Resource v5.1.1 that could allow an attacker to create specially crafted requests to access data in an...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mc (UTSA-2026-093026)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093026 advisory. An issue was discovered in Midnight Commander through 4.8.26. When establishing an SFTP connection, the fingerprint of the server is neither checked nor displayed. A...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: p11-kit (UTSA-2026-032283)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032283 advisory. An issue was discovered in p11-kit 0.21.1 through 0.23.21. A heap-based buffer over-read has been discovered in the RPC protocol used by thep11-kit server/remote...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: log4j12 (UTSA-2026-093020)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093020 advisory. CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: rpm (UTSA-2026-093007)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093007 advisory. A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package or...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: rsyslog (UTSA-2025-002269)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002269 advisory. Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is used. This c...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: lapack (UTSA-2026-032438)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032438 advisory. An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: velocity (UTSA-2024-005626)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-005626 advisory. An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account runnin...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: cryptsetup (UTSA-2026-030644)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-030644 advisory. It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker with physical acces...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: avalon-framework (UTSA-2026-093017)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093017 advisory. Apache Log4j2 versions 2.0-beta7 through 2.17.0 excluding security fix releases 2.3.2 and 2.12.4 are vulnerable to a remote code execution RCE attack when a...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: libdb (UTSA-2026-032341)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032341 advisory. Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138, prior to 6.2.38 and prior to 18.1.32. Easil...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: selinux-policy (UTSA-2025-002272)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002272 advisory. An issue was discovered in the selinux-policy aka Reference Policy package 3.14 through 2020-08-24 because the .config/Yubico directory is mishandled. Consequently,...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: luajit (UTSA-2025-002298)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002298 advisory. LuaJIT through 2.1.0-beta3 has an out-of-bounds read in ljerrrun in ljerr.c. Tenable has extracted the preceding description block directly from the Unity Linux...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libtirpc (UTSA-2025-002260)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002260 advisory. In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This ca...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: virglrenderer (UTSA-2026-061532)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-061532 advisory. An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer virglrenderer. This flaw allows a malicious guest to create a specially crafted virgil...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: unzip (UTSA-2025-002255)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002255 advisory. Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cpio (UTSA-2026-092971)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-092971 advisory. The cpiosafernamesuffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service out-of-bounds write via a crafted cpio file. Tenable has...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: apache-commons-compress (UTSA-2026-032265)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032265 advisory. When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very sma...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: fribidi (UTSA-2025-002250)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002250 advisory. A segmentation fault SEGV flaw was found in the Fribidi package and affects the fribidiremovebidimarks function of the lib/fribidi.c file. This flaw allows an attack...