Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100922)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100922 advisory. Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbi...

Unity Linux 20.1070a Security Update: compat-openssl10 (UTSA-2026-099546)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099546 advisory. Issue summary: A specially crafted PKCS7 or S/MIME signed message could trigger a use-after-free during PKCS7 signature verification. Impact summary: A use-after-fre...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101355)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101355 advisory. A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures. This vulnerability was...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099939)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099939 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: class: cdc-wdm: fix reordering issue in read code path Quoting the bug report: Due to compil...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099958)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099958 advisory. In the Linux kernel, the following vulnerability has been resolved: net/802/mrp: fix vector attribute parsing in mrppduparsevecattr In mrppduparsevecattr, vector...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100167)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100167 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix invalid reads in fence signaled events Correctly set the length of the drmevent t...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101153)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101153 advisory. Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. Tenabl...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: compat-libtiff3 (UTSA-2026-101079)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101079 advisory. A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs wh...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100744)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100744 advisory. In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix gssauth kref leak in gssallocmsg error path Commit 5940d1cf9f42 SUNRPC: Rebalance a...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100113)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100113 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: fix race between sctpwaitforconnect and peeloff sctpwaitforconnect drops and re-acquires th...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: mozjs78 (UTSA-2024-003381)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-003381 advisory. In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating too fe...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100156)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100156 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: usbtmc: Flush anchored URBs in usbtmcrelease When calling usbtmcrelease, pending anchored UR...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100164)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100164 advisory. In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix loop termination condition in gssfreeintokenpages The intoken-pages array is not NULL...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099697)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099697 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: module names must be null-terminated We need to explicitly check the length,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100523)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100523 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: module names must be null-terminated We need to explicitly check the length,...

Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-099454)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099454 advisory. ImageMagick before 7.1.2-18 contains a memory leak vulnerability in the META reader when processing APP1JPEG input paths. Attackers can trigger this memory leak by...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099950)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099950 advisory. In the Linux kernel, the following vulnerability has been resolved: arm64: Add support for TSV110 Spectre-BHB mitigation The TSV110 processor is vulnerable to the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: sssd (UTSA-2026-100784)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100784 advisory. A flaw was found in SSSD's LDAP sudo provider. When the ldapsudosearchbase option is not explicitly configured, SSSD searches the entire LDAP directory tree for...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101096)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101096 advisory. Information disclosure in the Framework component in DevTools. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird...

Unity Linux 20.1070e Security Update: netty (UTSA-2026-016700)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016700 advisory. Apache Log4j2 versions 2.0-alpha1 through 2.16.0 excluding 2.12.3 and 2.3.1 did not protect from uncontrolled recursion from self-referential lookups. This allows an...