Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100164)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100164 advisory. In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix loop termination condition in gssfreeintokenpages The intoken-pages array is not NULL...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: mozjs78 (UTSA-2024-003381)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-003381 advisory. In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating too fe...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099937)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099937 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix SECINFONONAME decode error cleanup nfsd4decodesecinfononame currently initializes sinex...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100730)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100730 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/komeda: fix integer overflow in AFBC framebuffer size check The AFBC framebuffer size...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101131)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101131 advisory. Heap buffer overflow in libvpx. This vulnerability was fixed in Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR 115.32.1, Thunderbird 140.7.2, and Thunderbird...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100156)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100156 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: usbtmc: Flush anchored URBs in usbtmcrelease When calling usbtmcrelease, pending anchored UR...

Unity Linux 20.1070a Security Update: osbuild-composer (UTSA-2026-101300)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101300 advisory. If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100770)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100770 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev: au1200fb: Fix a memory leak in au1200fbdrvprobe In au1200fbdrvprobe, when platformgetirq...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mozjs78 (UTSA-2024-002119)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-002119 advisory. A mishandled security check when creating a WebSocket in a WebWorker caused the Content Security Policy connect-src header to be ignored. This could lead to...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100511)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100511 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: ecc - Fix carry overflow in vli multiplication The carry flag calculation fails when...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100495)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100495 advisory. In the Linux kernel, the following vulnerability has been resolved: exfat: bound uniname advance in exfatfinddirentry In exfatfinddirentry, each TYPEEXTEND file nam...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-091345)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-091345 advisory. trackheader in libavformat/vividas.c in FFmpeg 4.3.1 has an out-of-bounds write because of incorrect extradata packing. Tenable has extracted the preceding descripti...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101490)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101490 advisory. Information disclosure in the Networking: Cache component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-101086)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101086 advisory. The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101352)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101352 advisory. A compromised web process using malicious IPC messages could have caused the privileged browser process to reveal blocks of its memory to the compromised process. Th...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101287)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101287 advisory. Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101481)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101481 advisory. Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100313)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100313 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackh323: fix OOB read in decodechoice In decodechoice, the boundary check...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: samba (UTSA-2026-101507)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101507 advisory. A flaw was found in samba's pamwinbind. When mkhomedir is enabled, pamwinbind chowns the target account's home directory without validating the path is not a critica...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101172)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101172 advisory. Information disclosure due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1,...