Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: mozjs78 (UTSA-2024-003381)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-003381 advisory. In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating too fe...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-100882)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100882 advisory. The issue was addressed with improved checks. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.2, tvOS 18.2, visionOS 2....

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gstreamer1-plugins-good (UTSA-2026-022345)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022345 advisory. An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in gstwavparseadtlchunk function. The patch added a size validation check lsize + 8 size, but it do...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101120)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101120 advisory. Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. Tenable has extract...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100888)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100888 advisory. Improper Validation of Unsafe Equivalence in punycode by the idna crate from Servo rust-url allows an attacker to create a punycode hostname that one part of a syste...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101088)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101088 advisory. Integer overflow in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101338)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101338 advisory. Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099927)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099927 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: Make cakeenqueue return NETXMITCN when past bufferlimit The following setup can trigge...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100956)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100956 advisory. Integer overflow in the SVG component. This vulnerability was fixed in Firefox 143, Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100889)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100889 advisory. Uninitialized memory in the JavaScript Engine component. This vulnerability was fixed in Firefox 142, Firefox ESR 128.14, Firefox ESR 140.2, Thunderbird 142,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100509)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100509 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSv4: include MAYWRITE in open permission mask for OTRUNC POSIX requires write permission to...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101160)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101160 advisory. Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100116)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100116 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: serial: ioti: fix heap overflow in getmanufinfo getmanufinfo reads le16tocpuromdesc-Size byt...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101096)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101096 advisory. Information disclosure in the Framework component in DevTools. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100333)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100333 advisory. In the Linux kernel, the following vulnerability has been resolved: net: 3com: 3c59x: fix possible null dereference in vortexprobe1 pdev can be null and freering: ca...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101131)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101131 advisory. Heap buffer overflow in libvpx. This vulnerability was fixed in Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR 115.32.1, Thunderbird 140.7.2, and Thunderbird...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101279)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101279 advisory. Memory safety bug present in Firefox ESR 128.9, and Thunderbird 128.9. This bug showed evidence of memory corruption and we presume that with enough effort this coul...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100164)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100164 advisory. In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix loop termination condition in gssfreeintokenpages The intoken-pages array is not NULL...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100132)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100132 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: diag: reject stale associations in dumpone path The SCTP exact sockdiag lookup can hold a...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101280)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101280 advisory. Memory safety bug fixed in Thunderbird ESR 140.12. This vulnerability was fixed in Firefox ESR 140.12 and Thunderbird 140.12. Tenable has extracted the preceding...