Unity Linux 20.1070e Security Update: expat (UTSA-2026-099491)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099491 advisory. libexpat before 2.8.2 does not consider XMLTOKDATACHARS in doCdataSection and thus lacks handler call depth tracking for various calls from within handlers in cases ...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100180)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100180 advisory. In the Linux kernel, the following vulnerability has been resolved: wireguard: receive: annotate data-race around receivingcounter.counter Syzkaller with KCSAN...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099769)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099769 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: remove a BUGON in ext4mbreleasegrouppa If a malicious fuzzer overwrites the ext4 superblock...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-100907)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100907 advisory. The issue was addressed with improved input validation. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5,...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101092)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101092 advisory. Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbi...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101364)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101364 advisory. Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbir...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100495)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100495 advisory. In the Linux kernel, the following vulnerability has been resolved: exfat: bound uniname advance in exfatfinddirentry In exfatfinddirentry, each TYPEEXTEND file nam...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100341)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100341 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: reject mount if bigalloc with sfirstdatablock != 0 bigalloc with sfirstdatablock != 0 is no...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-101308)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101308 advisory. The issue was addressed with improved handling of caches. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100714)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100714 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/exynos: vidi: use priv-vididev for ctx lookup in vidiconnectionioctl vidiconnectionioctl...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101487)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101487 advisory. Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7. Tenable ha...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100320)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100320 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: fix bcackers underflow on duplicate GRPACKMSG The GRPACKMSG handler in tipcgroupprotorcv...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100532)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100532 advisory. In the Linux kernel, the following vulnerability has been resolved: sched/rt: Have RTPUSHIPI be default off for non PREEMPTRT RT migration is done aggressively. When...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101124)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101124 advisory. Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101321)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101321 advisory. Privilege escalation in the Networking component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. Tenable h...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100945)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100945 advisory. Spoofing issue in the Form Autofill component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. Tenable has...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-101360)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101360 advisory. A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099698)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099698 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: ecc - Fix carry overflow in vli multiplication The carry flag calculation fails when...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101295)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101295 advisory. Information disclosure in the Networking: Cache component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101164)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101164 advisory. JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6...